Overview

overview

7

Static

static

3

eac75f7309...18.exe

windows7-x64

7

eac75f7309...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    eac75f730971cc220f109c2bb2119191_JaffaCakes118

  • Size

    18KB

  • Sample

    240410-lnwwzsea6z

  • MD5

    eac75f730971cc220f109c2bb2119191

  • SHA1

    6f00854b797c390e547a9c0239f185ae2864d46f

  • SHA256

    c616d32f956484aaf4f2aa093e8ab89d9a17831cb9f0c0c5d4d888573e1599bb

  • SHA512

    c0977a583634b74fa03db7aa1b35621eff43d054eaaa38d7d7765d20b6223083229cd6e0ad04f802bd50e42d0af64ae96bfa911d70d317b0a4fb41516702228f

  • SSDEEP

    384:QzhEdV2IcjILrExKc9mpv5LTCl593z0wtyxYxe:lVnckLEvo5Y9DXxe

Score
7/10
persistence

Malware Config

Targets

    • Target

      eac75f730971cc220f109c2bb2119191_JaffaCakes118

    • Size

      18KB

    • MD5

      eac75f730971cc220f109c2bb2119191

    • SHA1

      6f00854b797c390e547a9c0239f185ae2864d46f

    • SHA256

      c616d32f956484aaf4f2aa093e8ab89d9a17831cb9f0c0c5d4d888573e1599bb

    • SHA512

      c0977a583634b74fa03db7aa1b35621eff43d054eaaa38d7d7765d20b6223083229cd6e0ad04f802bd50e42d0af64ae96bfa911d70d317b0a4fb41516702228f

    • SSDEEP

      384:QzhEdV2IcjILrExKc9mpv5LTCl593z0wtyxYxe:lVnckLEvo5Y9DXxe

    Score
    7/10
    persistence

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks