Overview

overview

10

Static

static

3

5340498c70...18.exe

windows7-x64

10

5340498c70...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5340498c708e9d77c5ecbd662d1fe3e6_JaffaCakes118

  • Size

    468KB

  • Sample

    241017-xvkyva1cjf

  • MD5

    5340498c708e9d77c5ecbd662d1fe3e6

  • SHA1

    489c25313348eaf3f34a090e7a7ce5a80713ea42

  • SHA256

    bdaa9e74e87d4b699a145e8406547fe5ac4eb8e80c6bea51c7032c24cbdd05fa

  • SHA512

    9237ef3e57d6245a326a4741e1923475bba53e2d4ce5bc25f804b224d5d6544f145f6c3d4fd11ade7b2ced42e78fdd4fa39048ac57a71765e91bbb986112658a

  • SSDEEP

    6144:ouKHAro28/VQLprx3MNp4EIWrzy3esYDT8GG57a8kvwgY/Hpsel5yVz2/0E5Mzho:oVCoP/V6REfges48GGhX/Jfcz2ezh

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      5340498c708e9d77c5ecbd662d1fe3e6_JaffaCakes118

    • Size

      468KB

    • MD5

      5340498c708e9d77c5ecbd662d1fe3e6

    • SHA1

      489c25313348eaf3f34a090e7a7ce5a80713ea42

    • SHA256

      bdaa9e74e87d4b699a145e8406547fe5ac4eb8e80c6bea51c7032c24cbdd05fa

    • SHA512

      9237ef3e57d6245a326a4741e1923475bba53e2d4ce5bc25f804b224d5d6544f145f6c3d4fd11ade7b2ced42e78fdd4fa39048ac57a71765e91bbb986112658a

    • SSDEEP

      6144:ouKHAro28/VQLprx3MNp4EIWrzy3esYDT8GG57a8kvwgY/Hpsel5yVz2/0E5Mzho:oVCoP/V6REfges48GGhX/Jfcz2ezh

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks