Overview

overview

10

Static

static

3

9efb243e50...18.exe

windows7-x64

10

9efb243e50...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9efb243e50d93331b625290aa6ef464e_JaffaCakes118

  • Size

    416KB

  • Sample

    241126-bh97basqdm

  • MD5

    9efb243e50d93331b625290aa6ef464e

  • SHA1

    32b76ce9f8f7f54607b0a5edad80c5c94b2c0df8

  • SHA256

    8932831d75c34eb06c2ca120d2bfb5b143b23eea0c412a19a5fd9f0da1f3f318

  • SHA512

    46bcb29deaa4c57232311b3a071945d435589b7d92a7121f874a35b6bd2f1eb2eeec25361335e0852f9f6eb50deaed4ac7f7a13cda87af17b745bd6339ef0619

  • SSDEEP

    12288:S8BUZm5tkFnRW32C82vvnn6IpZpzYL3hK:lU+tk1w99vnn7pfzW3h

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      9efb243e50d93331b625290aa6ef464e_JaffaCakes118

    • Size

      416KB

    • MD5

      9efb243e50d93331b625290aa6ef464e

    • SHA1

      32b76ce9f8f7f54607b0a5edad80c5c94b2c0df8

    • SHA256

      8932831d75c34eb06c2ca120d2bfb5b143b23eea0c412a19a5fd9f0da1f3f318

    • SHA512

      46bcb29deaa4c57232311b3a071945d435589b7d92a7121f874a35b6bd2f1eb2eeec25361335e0852f9f6eb50deaed4ac7f7a13cda87af17b745bd6339ef0619

    • SSDEEP

      12288:S8BUZm5tkFnRW32C82vvnn6IpZpzYL3hK:lU+tk1w99vnn7pfzW3h

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks