Overview

overview

10

Static

static

3

a5e19b4c48...18.exe

windows7-x64

10

a5e19b4c48...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5e19b4c485edcf53a9382e906bf24d2_JaffaCakes118

  • Size

    448KB

  • Sample

    240818-h6y8aavgqp

  • MD5

    a5e19b4c485edcf53a9382e906bf24d2

  • SHA1

    3de69dc7c0007ed5ee2f9272836b82c3ce596223

  • SHA256

    a394438185eaab13d09eecf4254b2f008111905b3c7249242fc9e84263950202

  • SHA512

    893793f4b5abd60ea24e048a9698627413c5669db1134eb217140118baa4d86bb298bfccacba06d7ac76c1bb2863a1c95cdccc34a447b895315d4c668c79ea7c

  • SSDEEP

    6144:1/uLIIh13PUFGxdb/6Z87EnMlcrDd1TLiJI0IzL+SKv+lFVsGXHHzXVYJ3p+:1/sffUIdD6Z8A5MI/rxSKzFWE

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      a5e19b4c485edcf53a9382e906bf24d2_JaffaCakes118

    • Size

      448KB

    • MD5

      a5e19b4c485edcf53a9382e906bf24d2

    • SHA1

      3de69dc7c0007ed5ee2f9272836b82c3ce596223

    • SHA256

      a394438185eaab13d09eecf4254b2f008111905b3c7249242fc9e84263950202

    • SHA512

      893793f4b5abd60ea24e048a9698627413c5669db1134eb217140118baa4d86bb298bfccacba06d7ac76c1bb2863a1c95cdccc34a447b895315d4c668c79ea7c

    • SSDEEP

      6144:1/uLIIh13PUFGxdb/6Z87EnMlcrDd1TLiJI0IzL+SKv+lFVsGXHHzXVYJ3p+:1/sffUIdD6Z8A5MI/rxSKzFWE

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks