Overview

overview

10

Static

static

3

cde34e278b...18.exe

windows7-x64

10

cde34e278b...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    cde34e278b90422a8240d408bc04646a_JaffaCakes118

  • Size

    328KB

  • Sample

    240901-axr4lsvbqn

  • MD5

    cde34e278b90422a8240d408bc04646a

  • SHA1

    27aec05897a12fc34d905c7d8e48f8e7b8a216ae

  • SHA256

    a5a4f9f92b4bfde5316da7ca1d4be042fa3d6e770b7ab9ca517f13651c068026

  • SHA512

    5b187d8886d680fedd67d1d9e165ce7fd57579ce8accb40c6a530eb1d343b1fa97dcf95dba00c61e891f3db8367bb255603776451d1cfc242b01569bb45ef5a3

  • SSDEEP

    6144:KAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4ah:j9Y5ioSsC5+BIK4Tg9EEigRh

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      cde34e278b90422a8240d408bc04646a_JaffaCakes118

    • Size

      328KB

    • MD5

      cde34e278b90422a8240d408bc04646a

    • SHA1

      27aec05897a12fc34d905c7d8e48f8e7b8a216ae

    • SHA256

      a5a4f9f92b4bfde5316da7ca1d4be042fa3d6e770b7ab9ca517f13651c068026

    • SHA512

      5b187d8886d680fedd67d1d9e165ce7fd57579ce8accb40c6a530eb1d343b1fa97dcf95dba00c61e891f3db8367bb255603776451d1cfc242b01569bb45ef5a3

    • SSDEEP

      6144:KAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4ah:j9Y5ioSsC5+BIK4Tg9EEigRh

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks