Overview

overview

7

Static

static

3

f6bb86f44e...18.exe

windows7-x64

7

f6bb86f44e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6bb86f44eb6531473d55b017497ac2d_JaffaCakes118

  • Size

    148KB

  • Sample

    240417-2nalrahf51

  • MD5

    f6bb86f44eb6531473d55b017497ac2d

  • SHA1

    4aa26b2bb1362b3b20519f7e1b6855776e68826a

  • SHA256

    422e9ddaee6d755375b41fc8e3f1b406b2ad2019b809533098017536785907c9

  • SHA512

    57d0314d60d42484fb28f7ab13ce454a43dcc65acc95047d0dd2c07596375ae58c8efaefdc8f9a3431309bc85d8e28531050c8f68ac499369865ce92bfad394f

  • SSDEEP

    3072:Gd3Z7stZMRYPTB8ilfPSGSlCunRDSMdV:GdpcMR+F8aSlCWRDS

Score
7/10
persistence

Malware Config

Targets

    • Target

      f6bb86f44eb6531473d55b017497ac2d_JaffaCakes118

    • Size

      148KB

    • MD5

      f6bb86f44eb6531473d55b017497ac2d

    • SHA1

      4aa26b2bb1362b3b20519f7e1b6855776e68826a

    • SHA256

      422e9ddaee6d755375b41fc8e3f1b406b2ad2019b809533098017536785907c9

    • SHA512

      57d0314d60d42484fb28f7ab13ce454a43dcc65acc95047d0dd2c07596375ae58c8efaefdc8f9a3431309bc85d8e28531050c8f68ac499369865ce92bfad394f

    • SSDEEP

      3072:Gd3Z7stZMRYPTB8ilfPSGSlCunRDSMdV:GdpcMR+F8aSlCWRDS

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks