Overview

overview

10

Static

static

10

JaffaCakes...b3.exe

windows10-2004-x64

10

JaffaCakes...b3.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_3f87576d5beedc2a9735842ec2604ab3
  • Size 72KB
  • Sample260104-yaerrswra1
  • SHA256 e2388aebbda041514643c94faa9783b694e745d7c673d2bf0e0de34a5021e5db
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vilseldefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target
      JaffaCakes118_3f87576d5beedc2a9735842ec2604ab3
    • Size 72KB
    • SHA256 e2388aebbda041514643c94faa9783b694e745d7c673d2bf0e0de34a5021e5db
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    defense_evasiondiscoveryvilseltrojan

    • Detects Vilsel trojan

    • Modifies visibility of file extensions in Explorer

      defense_evasion

    • Vilsel

      Vilsel is a trojan written in VisualBasic.

      trojanvilsel

    • Vilsel family

      vilsel

    • Disables RegEdit via registry modification

      defense_evasion

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks