Overview

overview

7

Static

static

3

eae3babb47...18.exe

windows7-x64

7

eae3babb47...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    eae3babb47d0e85ea88b436d1cb741e5_JaffaCakes118

  • Size

    320KB

  • Sample

    240410-mv42lsga2x

  • MD5

    eae3babb47d0e85ea88b436d1cb741e5

  • SHA1

    93e8d356e19ec86a31945ba3c05898521f49e885

  • SHA256

    46e459673eaf3e5e92a0c4d4c2f5dd5072bc293ba73b4cdbdb8e869150d9a482

  • SHA512

    5a18180442590a25cb2cef09a811bc8065470a1c42efeaa8299a51a7818b69012e4cbc64e63cfcdd1487918b2eed37540e1de59aa3bc79a301a68d206d384e54

  • SSDEEP

    6144:u0PZv5LLLLLLLL555vbbPZrrXZLrrrrUPeYlmxJRAPKXsKO72r9seZ+3SbBAlkuD:u1hloKyXrOk9hgSbBA2Qf

Score
7/10
persistence

Malware Config

Targets

    • Target

      eae3babb47d0e85ea88b436d1cb741e5_JaffaCakes118

    • Size

      320KB

    • MD5

      eae3babb47d0e85ea88b436d1cb741e5

    • SHA1

      93e8d356e19ec86a31945ba3c05898521f49e885

    • SHA256

      46e459673eaf3e5e92a0c4d4c2f5dd5072bc293ba73b4cdbdb8e869150d9a482

    • SHA512

      5a18180442590a25cb2cef09a811bc8065470a1c42efeaa8299a51a7818b69012e4cbc64e63cfcdd1487918b2eed37540e1de59aa3bc79a301a68d206d384e54

    • SSDEEP

      6144:u0PZv5LLLLLLLL555vbbPZrrXZLrrrrUPeYlmxJRAPKXsKO72r9seZ+3SbBAlkuD:u1hloKyXrOk9hgSbBA2Qf

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks