Overview

overview

8

Static

static

3

f010137376...18.exe

windows7-x64

8

f010137376...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f010137376d5114805bc3b3a3a090391_JaffaCakes118

  • Size

    6.1MB

  • Sample

    240415-cp45babh89

  • MD5

    f010137376d5114805bc3b3a3a090391

  • SHA1

    e32666f3077f36a9d7927c01d1bf01bedc21ae87

  • SHA256

    cd836c43705cd054812d3d0be8c50db59d3f52679846e52fbc3bb19049abf6ae

  • SHA512

    4c4986db4b47b618dff1bee676852b0926911755c0f65a7db0c98f81a8406c49c1ea94c0e8a5e68bbf962dd82c4648406f202dd79873a026fb034914649d9327

  • SSDEEP

    196608:pjt1r2KLRt4Wt1zsegFte9ZQ9cFsCivIfJqIOeO:lrrHv4W/zgFtAZHsYJqeO

Score
8/10

Malware Config

Targets

    • Target

      f010137376d5114805bc3b3a3a090391_JaffaCakes118

    • Size

      6.1MB

    • MD5

      f010137376d5114805bc3b3a3a090391

    • SHA1

      e32666f3077f36a9d7927c01d1bf01bedc21ae87

    • SHA256

      cd836c43705cd054812d3d0be8c50db59d3f52679846e52fbc3bb19049abf6ae

    • SHA512

      4c4986db4b47b618dff1bee676852b0926911755c0f65a7db0c98f81a8406c49c1ea94c0e8a5e68bbf962dd82c4648406f202dd79873a026fb034914649d9327

    • SSDEEP

      196608:pjt1r2KLRt4Wt1zsegFte9ZQ9cFsCivIfJqIOeO:lrrHv4W/zgFtAZHsYJqeO

    Score
    8/10

    • Downloads MZ/PE file

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks