Overview

overview

10

Static

static

3

a81e6b41f5...18.exe

windows7-x64

10

a81e6b41f5...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a81e6b41f5f3e09e90f2a443ed07cbde_JaffaCakes118

  • Size

    393KB

  • Sample

    240818-zdr2yawdjq

  • MD5

    a81e6b41f5f3e09e90f2a443ed07cbde

  • SHA1

    b4fd468936db021a0586048acbabce224b61bc7c

  • SHA256

    6d64d143fdfbea3e75f7e7e748f8c4c72c993743a6c47aff212927ee0781c1cf

  • SHA512

    196cb227d5d2198bed79ae769483eb19d30a6bebce95cba0aa75e6046ceeb4be99f58bcb9a4516b1d746b61bec9b1f535318497f0620f43e08819632c6f1bfb6

  • SSDEEP

    6144:ujwPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:Lv8RBmmgbGMF33SU+tDRqhG6/U8aKFu

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      a81e6b41f5f3e09e90f2a443ed07cbde_JaffaCakes118

    • Size

      393KB

    • MD5

      a81e6b41f5f3e09e90f2a443ed07cbde

    • SHA1

      b4fd468936db021a0586048acbabce224b61bc7c

    • SHA256

      6d64d143fdfbea3e75f7e7e748f8c4c72c993743a6c47aff212927ee0781c1cf

    • SHA512

      196cb227d5d2198bed79ae769483eb19d30a6bebce95cba0aa75e6046ceeb4be99f58bcb9a4516b1d746b61bec9b1f535318497f0620f43e08819632c6f1bfb6

    • SSDEEP

      6144:ujwPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:Lv8RBmmgbGMF33SU+tDRqhG6/U8aKFu

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks