Overview

overview

10

Static

static

3

ec93e76820...18.exe

windows7-x64

10

ec93e76820...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec93e768207636ccf3c40c1d263a4f33_JaffaCakes118

  • Size

    456KB

  • Sample

    240920-by1mtaseqn

  • MD5

    ec93e768207636ccf3c40c1d263a4f33

  • SHA1

    1c3c61ee0f25cbae94db1c886690816d0d69cdc0

  • SHA256

    233f21570a034592294090e380bb907b06e6ca92025dd83374d958cc4f5bba43

  • SHA512

    4cffdac076521c1b21d763e0fe056c460a3eaf2218e18e367c826a74ce785d1c1d6c873212f7e6f7a46ad482ed95f90fdead8bd92af31c66665e028d7af9bc6f

  • SSDEEP

    6144:4jmYRNDkf30Wdu5CdkzBehjN7TmrIMY/MVUbk26y1sZKhbO36FlLS4R:4xksWdu5xWh/muAKsibOW

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ec93e768207636ccf3c40c1d263a4f33_JaffaCakes118

    • Size

      456KB

    • MD5

      ec93e768207636ccf3c40c1d263a4f33

    • SHA1

      1c3c61ee0f25cbae94db1c886690816d0d69cdc0

    • SHA256

      233f21570a034592294090e380bb907b06e6ca92025dd83374d958cc4f5bba43

    • SHA512

      4cffdac076521c1b21d763e0fe056c460a3eaf2218e18e367c826a74ce785d1c1d6c873212f7e6f7a46ad482ed95f90fdead8bd92af31c66665e028d7af9bc6f

    • SSDEEP

      6144:4jmYRNDkf30Wdu5CdkzBehjN7TmrIMY/MVUbk26y1sZKhbO36FlLS4R:4xksWdu5xWh/muAKsibOW

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks