Overview

overview

7

Static

static

3

f7d6afb20a...18.exe

windows7-x64

7

f7d6afb20a...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f7d6afb20a53980765cad31ce15136d0_JaffaCakes118

  • Size

    356KB

  • Sample

    240418-mwlxescb5s

  • MD5

    f7d6afb20a53980765cad31ce15136d0

  • SHA1

    f0b8818df021b6c109141040b882701b1e2a78a7

  • SHA256

    42221ee298dff0f0c0a48e9bf8551f88a06af510191c347cb2cfd99520095b77

  • SHA512

    a975fd421be0a891a717ac44f8361874f8f1a9431bde348df93020a5d25173794ed52e5d605661d8c0d00bc311fa62ce0d38dce143ddca392f967c08fe2e5c96

  • SSDEEP

    6144:7vbx8YB+Bta45aXKTjBBH79JBL15ApnLUksKNp89Fc+L:740XG9Lrwnwe9

Score
7/10
persistence

Malware Config

Targets

    • Target

      f7d6afb20a53980765cad31ce15136d0_JaffaCakes118

    • Size

      356KB

    • MD5

      f7d6afb20a53980765cad31ce15136d0

    • SHA1

      f0b8818df021b6c109141040b882701b1e2a78a7

    • SHA256

      42221ee298dff0f0c0a48e9bf8551f88a06af510191c347cb2cfd99520095b77

    • SHA512

      a975fd421be0a891a717ac44f8361874f8f1a9431bde348df93020a5d25173794ed52e5d605661d8c0d00bc311fa62ce0d38dce143ddca392f967c08fe2e5c96

    • SSDEEP

      6144:7vbx8YB+Bta45aXKTjBBH79JBL15ApnLUksKNp89Fc+L:740XG9Lrwnwe9

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks