Overview

overview

10

Static

static

3

957ee4f8c1...18.exe

windows7-x64

10

957ee4f8c1...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    957ee4f8c1a279578670e36554d172a4_JaffaCakes118

  • Size

    432KB

  • Sample

    240814-lcs1yszakk

  • MD5

    957ee4f8c1a279578670e36554d172a4

  • SHA1

    6affd77adbf624ff0c1c541adbb6c023d6caae7f

  • SHA256

    54e87fac23f6e04095e516e8ed1007f473e6beade9fe80b5f0f904a5292a17f4

  • SHA512

    67ae2b6a57be1cfdbe3fb2088d8551a64cd4481d4fef2aedf3d2e8051a0a70129c8ecb4eef74a33dc8a02fbd8be13c69261d832bd804525ba4c756e7d4b6354b

  • SSDEEP

    6144:69rMKYOYHp7GrEp0wSvONKT+3a0J+PMYj7hmNAc3eCxoHdqmfZxkeGLaMD:66KpK724Sl4Y5mNHVw7BOLJ

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      957ee4f8c1a279578670e36554d172a4_JaffaCakes118

    • Size

      432KB

    • MD5

      957ee4f8c1a279578670e36554d172a4

    • SHA1

      6affd77adbf624ff0c1c541adbb6c023d6caae7f

    • SHA256

      54e87fac23f6e04095e516e8ed1007f473e6beade9fe80b5f0f904a5292a17f4

    • SHA512

      67ae2b6a57be1cfdbe3fb2088d8551a64cd4481d4fef2aedf3d2e8051a0a70129c8ecb4eef74a33dc8a02fbd8be13c69261d832bd804525ba4c756e7d4b6354b

    • SSDEEP

      6144:69rMKYOYHp7GrEp0wSvONKT+3a0J+PMYj7hmNAc3eCxoHdqmfZxkeGLaMD:66KpK724Sl4Y5mNHVw7BOLJ

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks