Overview

overview

10

Static

static

3

eac97c9f75...18.exe

windows7-x64

10

eac97c9f75...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac97c9f7533f816cbe246116fe64b07_JaffaCakes118

  • Size

    328KB

  • Sample

    240919-hjyy1awcnn

  • MD5

    eac97c9f7533f816cbe246116fe64b07

  • SHA1

    9bbe9334b5963e835ac7127164e480f33c0461cb

  • SHA256

    159a7d2829032437c9a6df144f2ae9ca372fde232aa15272d0a8b752dcbe95a9

  • SHA512

    992cb5c2ef241dcc0e20414d2b3e87cc577ba4bfadb7957f2fe19f5bd1317bf85c66e7b34ac20ab3271a09f9320ce7f10e93212c8870c9ffa5a6af22cbafe7a0

  • SSDEEP

    6144:5AK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4a:K9Y5ioSsC5+BIK4Tg9EEigR

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      eac97c9f7533f816cbe246116fe64b07_JaffaCakes118

    • Size

      328KB

    • MD5

      eac97c9f7533f816cbe246116fe64b07

    • SHA1

      9bbe9334b5963e835ac7127164e480f33c0461cb

    • SHA256

      159a7d2829032437c9a6df144f2ae9ca372fde232aa15272d0a8b752dcbe95a9

    • SHA512

      992cb5c2ef241dcc0e20414d2b3e87cc577ba4bfadb7957f2fe19f5bd1317bf85c66e7b34ac20ab3271a09f9320ce7f10e93212c8870c9ffa5a6af22cbafe7a0

    • SSDEEP

      6144:5AK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4a:K9Y5ioSsC5+BIK4Tg9EEigR

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks