Overview

overview

10

Static

static

3

d73c69d10e...18.exe

windows7-x64

10

d73c69d10e...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d73c69d10e36cb7d0e096e9a4f72bae4_JaffaCakes118

  • Size

    340KB

  • Sample

    240909-2z5k9svcrn

  • MD5

    d73c69d10e36cb7d0e096e9a4f72bae4

  • SHA1

    2025032a6763adbfdddff22f5862d6cac0e34c0b

  • SHA256

    2fefd31b54ce839d120833ab90502f51d2c9133ef154465290a1200ab60a4c0b

  • SHA512

    66a805f10c1dbf41b9b3ed19d50e8a9c66861dfe1932ff57b06566964fe9c19e26fc43b385babc5338dd52ed264c363bcac070e3f4078effe67777f99d861b01

  • SSDEEP

    6144:8todKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4PydNbBj:r1tUM5aV/oLOVfhaa9ZpV51

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      d73c69d10e36cb7d0e096e9a4f72bae4_JaffaCakes118

    • Size

      340KB

    • MD5

      d73c69d10e36cb7d0e096e9a4f72bae4

    • SHA1

      2025032a6763adbfdddff22f5862d6cac0e34c0b

    • SHA256

      2fefd31b54ce839d120833ab90502f51d2c9133ef154465290a1200ab60a4c0b

    • SHA512

      66a805f10c1dbf41b9b3ed19d50e8a9c66861dfe1932ff57b06566964fe9c19e26fc43b385babc5338dd52ed264c363bcac070e3f4078effe67777f99d861b01

    • SSDEEP

      6144:8todKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4PydNbBj:r1tUM5aV/oLOVfhaa9ZpV51

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks