Overview

overview

10

Static

static

3

ee9219f5f6...18.exe

windows7-x64

10

ee9219f5f6...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee9219f5f6c9ceb9253498267060e8d0_JaffaCakes118

  • Size

    452KB

  • Sample

    240920-2nmajssfjq

  • MD5

    ee9219f5f6c9ceb9253498267060e8d0

  • SHA1

    2a4a5d0de372d713cd2c80f24806437a8f610235

  • SHA256

    5050f2c4e900d4a82f4049b115cb00d769506854adedd74c9cf04e0d727a00b3

  • SHA512

    8488dd224754ac9f4969e1368a3bb2f8d1ce0433e32650863913a383558a02e8639f6e08f1c366e12ebf1cc573f39178499c0da0d780f6f0cf53b063213170e5

  • SSDEEP

    6144:hMJAGW9bmCH1SYLkCgyUVyXyKI0LMDHOf/2eoXLf1lvBeN7AVgDTr+4FBW:hUSKqlLEVyzI0WHOToXDEBAVwS4

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ee9219f5f6c9ceb9253498267060e8d0_JaffaCakes118

    • Size

      452KB

    • MD5

      ee9219f5f6c9ceb9253498267060e8d0

    • SHA1

      2a4a5d0de372d713cd2c80f24806437a8f610235

    • SHA256

      5050f2c4e900d4a82f4049b115cb00d769506854adedd74c9cf04e0d727a00b3

    • SHA512

      8488dd224754ac9f4969e1368a3bb2f8d1ce0433e32650863913a383558a02e8639f6e08f1c366e12ebf1cc573f39178499c0da0d780f6f0cf53b063213170e5

    • SSDEEP

      6144:hMJAGW9bmCH1SYLkCgyUVyXyKI0LMDHOf/2eoXLf1lvBeN7AVgDTr+4FBW:hUSKqlLEVyzI0WHOToXDEBAVwS4

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks