Overview

overview

10

Static

static

10

JaffaCakes...b4.exe

windows10-2004-x64

10

JaffaCakes...b4.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_3ebe8391d7f6daa628af71cca82805b4
  • Size 72KB
  • Sample260102-py547aby7b
  • SHA256 a96cf1235e3cc20175bc11135a9689e2a5fd53db2c651932f7b1fef5651789e0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vilseldefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target
      JaffaCakes118_3ebe8391d7f6daa628af71cca82805b4
    • Size 72KB
    • SHA256 a96cf1235e3cc20175bc11135a9689e2a5fd53db2c651932f7b1fef5651789e0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    defense_evasiondiscoveryvilseltrojan

    • Detects Vilsel trojan

    • Modifies visibility of file extensions in Explorer

      defense_evasion

    • Vilsel

      Vilsel is a trojan written in VisualBasic.

      trojanvilsel

    • Vilsel family

      vilsel

    • Disables RegEdit via registry modification

      defense_evasion

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks