Overview

overview

10

Static

static

3

eee5146873...18.exe

windows7-x64

10

eee5146873...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eee5146873a54c16b67750982dc1655c_JaffaCakes118

  • Size

    393KB

  • Sample

    240921-cvbpys1bnj

  • MD5

    eee5146873a54c16b67750982dc1655c

  • SHA1

    727acafe60225b77e6319b703f826f8e66bced1a

  • SHA256

    1638a3caaa7ecf9cd5bcfd97f3ae23e98ce61188bbe6873bb4cca7770b8c9620

  • SHA512

    3c356ec304900644b22320e52f37b69a9c5e36d3a9b6dbd0bd3e91aa231bc9720392d6a2c36af3823ee0ecb45afc640f6425fa35d46a0d2ab346193f7f02c1cb

  • SSDEEP

    6144:seYNeo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnZ9qxG:s9eQnhxUUSbuGFehOsuC8XmklbLqxG

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      eee5146873a54c16b67750982dc1655c_JaffaCakes118

    • Size

      393KB

    • MD5

      eee5146873a54c16b67750982dc1655c

    • SHA1

      727acafe60225b77e6319b703f826f8e66bced1a

    • SHA256

      1638a3caaa7ecf9cd5bcfd97f3ae23e98ce61188bbe6873bb4cca7770b8c9620

    • SHA512

      3c356ec304900644b22320e52f37b69a9c5e36d3a9b6dbd0bd3e91aa231bc9720392d6a2c36af3823ee0ecb45afc640f6425fa35d46a0d2ab346193f7f02c1cb

    • SSDEEP

      6144:seYNeo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnZ9qxG:s9eQnhxUUSbuGFehOsuC8XmklbLqxG

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks