Overview

overview

10

Static

static

3

ede367506c...18.exe

windows7-x64

10

ede367506c...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ede367506c517aa02a4edf1865ba0baf_JaffaCakes118

  • Size

    432KB

  • Sample

    240920-swxa2stcnc

  • MD5

    ede367506c517aa02a4edf1865ba0baf

  • SHA1

    d438caa88bedeafff684571127a5a31d497a1c3b

  • SHA256

    c11271170c5bfeb68d29d196ec41671cafdeaea260cf4c3b77fdfe09cc7edfc7

  • SHA512

    ea80e7a7d0275f15e62a2beeea1d30e3f0f130dc39fa8e77b30e69fca60c26f99856dac5da5601fb12b2005de78278af435ac300df83586fe426ffba9e8d7a85

  • SSDEEP

    12288:nyiHDBNOMpAaBYUAXqM5Pyfs79r+XeauktB9BI:nycDBkraB7AX75ouCB9BI

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ede367506c517aa02a4edf1865ba0baf_JaffaCakes118

    • Size

      432KB

    • MD5

      ede367506c517aa02a4edf1865ba0baf

    • SHA1

      d438caa88bedeafff684571127a5a31d497a1c3b

    • SHA256

      c11271170c5bfeb68d29d196ec41671cafdeaea260cf4c3b77fdfe09cc7edfc7

    • SHA512

      ea80e7a7d0275f15e62a2beeea1d30e3f0f130dc39fa8e77b30e69fca60c26f99856dac5da5601fb12b2005de78278af435ac300df83586fe426ffba9e8d7a85

    • SSDEEP

      12288:nyiHDBNOMpAaBYUAXqM5Pyfs79r+XeauktB9BI:nycDBkraB7AX75ouCB9BI

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks