Overview

overview

10

Static

static

3

f9de1d6bdf...18.exe

windows7-x64

10

f9de1d6bdf...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f9de1d6bdf4a44add0f1e1880940a468_JaffaCakes118

  • Size

    452KB

  • Sample

    240927-gxp3ks1hlb

  • MD5

    f9de1d6bdf4a44add0f1e1880940a468

  • SHA1

    4b56c1fd2f4632525a6ed9013f5d29e6cc55dba2

  • SHA256

    d33d51e511cc5ad5ce7b9e088ae1d31b869beea051247b9c311552176393cd5a

  • SHA512

    bd3858d0a758cb8a91b6d712681759f74a9a841d50936df5eda9e1aa57144c5d3a56988c2fcb4937ef9ff0723c6eb711e0da1d5edaffdc320bb95b184b44b083

  • SSDEEP

    6144:eMJAzj2kaKN0zUYueIOX9FH5KuPGQQDynZR0oo9o:e0KN8uQFZnjpZz

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      f9de1d6bdf4a44add0f1e1880940a468_JaffaCakes118

    • Size

      452KB

    • MD5

      f9de1d6bdf4a44add0f1e1880940a468

    • SHA1

      4b56c1fd2f4632525a6ed9013f5d29e6cc55dba2

    • SHA256

      d33d51e511cc5ad5ce7b9e088ae1d31b869beea051247b9c311552176393cd5a

    • SHA512

      bd3858d0a758cb8a91b6d712681759f74a9a841d50936df5eda9e1aa57144c5d3a56988c2fcb4937ef9ff0723c6eb711e0da1d5edaffdc320bb95b184b44b083

    • SSDEEP

      6144:eMJAzj2kaKN0zUYueIOX9FH5KuPGQQDynZR0oo9o:e0KN8uQFZnjpZz

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks