Overview

overview

10

Static

static

3

ee87ddce26...18.exe

windows7-x64

10

ee87ddce26...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee87ddce26826a60580226d3ff6f683d_JaffaCakes118

  • Size

    408KB

  • Sample

    240920-17ffns1fmm

  • MD5

    ee87ddce26826a60580226d3ff6f683d

  • SHA1

    15c687e41e26d7e79bc50893897794c7f28b93f1

  • SHA256

    d6974b112a728e2ed298bdac0614056bd896781e38ad68bd23c4462c2347f77b

  • SHA512

    57e7287a5ee870141169aa1a27b639928aa48c4b1f1162d7309187931ae04f3c7ef06290f92aeb6106f616d661cfb09a643c76fcb2eb511fa47f30ae50fc2978

  • SSDEEP

    6144:q7vmCW3YkP+q2/kb6MBq+MlyAIyscNeuSvlJE+is7CgS9NUM7Eke8HINDOuy:q7vvWQ/kRuyyRePHq2HSnUCne8oN

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ee87ddce26826a60580226d3ff6f683d_JaffaCakes118

    • Size

      408KB

    • MD5

      ee87ddce26826a60580226d3ff6f683d

    • SHA1

      15c687e41e26d7e79bc50893897794c7f28b93f1

    • SHA256

      d6974b112a728e2ed298bdac0614056bd896781e38ad68bd23c4462c2347f77b

    • SHA512

      57e7287a5ee870141169aa1a27b639928aa48c4b1f1162d7309187931ae04f3c7ef06290f92aeb6106f616d661cfb09a643c76fcb2eb511fa47f30ae50fc2978

    • SSDEEP

      6144:q7vmCW3YkP+q2/kb6MBq+MlyAIyscNeuSvlJE+is7CgS9NUM7Eke8HINDOuy:q7vvWQ/kRuyyRePHq2HSnUCne8oN

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks