Overview

overview

10

Static

static

3

eced37680f...18.exe

windows7-x64

10

eced37680f...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eced37680f8bc5fa379285fb2cfa8ea0_JaffaCakes118

  • Size

    408KB

  • Sample

    240920-f6be4s1bkf

  • MD5

    eced37680f8bc5fa379285fb2cfa8ea0

  • SHA1

    bfa6eb0c5e79ec99e14c386c60d1e0c449a1fc66

  • SHA256

    4d93d7bcd480e9c530f4a64ef25ea2da243592bec29528e976b6215561002c62

  • SHA512

    86cc85e610264d884a2a40d78219afa33b095fc1ff32189964be1adefc44182643eb3ae90e06fedeb6f2ca126c2c791e69d45382c9aba9f54a0cc4a25108ee2a

  • SSDEEP

    6144:hzzbdr3v9YtGRH98eoLSe2orDefhul74nKgSBKEUX4L2:hzlr34GWuexiud+18UX4L2

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      eced37680f8bc5fa379285fb2cfa8ea0_JaffaCakes118

    • Size

      408KB

    • MD5

      eced37680f8bc5fa379285fb2cfa8ea0

    • SHA1

      bfa6eb0c5e79ec99e14c386c60d1e0c449a1fc66

    • SHA256

      4d93d7bcd480e9c530f4a64ef25ea2da243592bec29528e976b6215561002c62

    • SHA512

      86cc85e610264d884a2a40d78219afa33b095fc1ff32189964be1adefc44182643eb3ae90e06fedeb6f2ca126c2c791e69d45382c9aba9f54a0cc4a25108ee2a

    • SSDEEP

      6144:hzzbdr3v9YtGRH98eoLSe2orDefhul74nKgSBKEUX4L2:hzlr34GWuexiud+18UX4L2

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks