Overview

overview

10

Static

static

3

b41d707cd5...18.exe

windows7-x64

10

b41d707cd5...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b41d707cd531e93bc02c24e11ac96fc3_JaffaCakes118

  • Size

    393KB

  • Sample

    240821-thveza1epn

  • MD5

    b41d707cd531e93bc02c24e11ac96fc3

  • SHA1

    265040257c53dee69536f2c1c5bfbf39170c8a77

  • SHA256

    56cf575425e0126fb2c090bd3a962bd5d48881d7090bf7743f05e6a1006dfe88

  • SHA512

    8d338bfc9133cbd67e8ee333cf6e169a6d52c859dbc4b9781f6a92f268278df51bbc0708b71f03fc5a99da574d2957e4cbde4db7486c67190f2056c7d43bcc8b

  • SSDEEP

    12288:N+9g7dUmmLen1G6Lkjr7plWzuDRsVqxmA:N+9g7dkenE6Qf7fpua5

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      b41d707cd531e93bc02c24e11ac96fc3_JaffaCakes118

    • Size

      393KB

    • MD5

      b41d707cd531e93bc02c24e11ac96fc3

    • SHA1

      265040257c53dee69536f2c1c5bfbf39170c8a77

    • SHA256

      56cf575425e0126fb2c090bd3a962bd5d48881d7090bf7743f05e6a1006dfe88

    • SHA512

      8d338bfc9133cbd67e8ee333cf6e169a6d52c859dbc4b9781f6a92f268278df51bbc0708b71f03fc5a99da574d2957e4cbde4db7486c67190f2056c7d43bcc8b

    • SSDEEP

      12288:N+9g7dUmmLen1G6Lkjr7plWzuDRsVqxmA:N+9g7dkenE6Qf7fpua5

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks