Overview

overview

10

Static

static

3

dcbfb16449...18.exe

windows7-x64

10

dcbfb16449...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcbfb164498747cd56c0ce7b1cdf947b_JaffaCakes118

  • Size

    408KB

  • Sample

    240912-wfxteswenl

  • MD5

    dcbfb164498747cd56c0ce7b1cdf947b

  • SHA1

    e6c969b314df7a99261fdfa64577d87f9ce1e05c

  • SHA256

    0ec34bfc17c1bef4f28d3aec29bf6c45602754f4462f692b64f9e0f1a744ead3

  • SHA512

    9c59e064a130e681a201335f1d136a31c277f056f50d5a73b7ad091a001088774946a7288a6d43c2c5ee0bf7550ec1c0691d81d14c8184463ca6dfc8534938f6

  • SSDEEP

    6144:EbU7oLEbc/v9YRNgvvV55rS9znnuAgzjx8wxuoXF+TAUUVbW5Tfh6ZFd:Enac/o6vvV5NS9zIjxNj3kfh6

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      dcbfb164498747cd56c0ce7b1cdf947b_JaffaCakes118

    • Size

      408KB

    • MD5

      dcbfb164498747cd56c0ce7b1cdf947b

    • SHA1

      e6c969b314df7a99261fdfa64577d87f9ce1e05c

    • SHA256

      0ec34bfc17c1bef4f28d3aec29bf6c45602754f4462f692b64f9e0f1a744ead3

    • SHA512

      9c59e064a130e681a201335f1d136a31c277f056f50d5a73b7ad091a001088774946a7288a6d43c2c5ee0bf7550ec1c0691d81d14c8184463ca6dfc8534938f6

    • SSDEEP

      6144:EbU7oLEbc/v9YRNgvvV55rS9znnuAgzjx8wxuoXF+TAUUVbW5Tfh6ZFd:Enac/o6vvV5NS9zIjxNj3kfh6

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks