Overview

overview

10

Static

static

3

aa0c14da42...18.exe

windows7-x64

10

aa0c14da42...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa0c14da4234e2c9de3fc310da75bddb_JaffaCakes118

  • Size

    68KB

  • Sample

    240819-hvhfdszgja

  • MD5

    aa0c14da4234e2c9de3fc310da75bddb

  • SHA1

    234beef45a1ccf0814e3229fe08c0e852ba0daa0

  • SHA256

    178d720302052767792c9fa6d2569446ea281bc5964c7c155c424ae894124da9

  • SHA512

    fc395346782bb4f302f91b8049a4494fe884b40da380b31240c80faf999e24e784fa2f510da942e61f56c74f7dd78641903840a6d114240e194d3d531d930588

  • SSDEEP

    1536:dGBvb9fwEB4RHKZQTjXJgMglhY9wdTjJiMnToIfMIOOoVJ2naIa:oBvZflyHKZEJgMOY9wdTYgTBfCOo

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      aa0c14da4234e2c9de3fc310da75bddb_JaffaCakes118

    • Size

      68KB

    • MD5

      aa0c14da4234e2c9de3fc310da75bddb

    • SHA1

      234beef45a1ccf0814e3229fe08c0e852ba0daa0

    • SHA256

      178d720302052767792c9fa6d2569446ea281bc5964c7c155c424ae894124da9

    • SHA512

      fc395346782bb4f302f91b8049a4494fe884b40da380b31240c80faf999e24e784fa2f510da942e61f56c74f7dd78641903840a6d114240e194d3d531d930588

    • SSDEEP

      1536:dGBvb9fwEB4RHKZQTjXJgMglhY9wdTjJiMnToIfMIOOoVJ2naIa:oBvZflyHKZEJgMOY9wdTYgTBfCOo

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks