Overview

overview

10

Static

static

3

f9d78ddd7e...18.exe

windows7-x64

10

f9d78ddd7e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9d78ddd7ef2f4200e83aa452d03192c_JaffaCakes118

  • Size

    411KB

  • Sample

    240419-jm4jbsdb41

  • MD5

    f9d78ddd7ef2f4200e83aa452d03192c

  • SHA1

    979824983e7ff0faf2c3f98c5ddad74c40d0ea7e

  • SHA256

    c98e242323138170045011f3ab41dc6a811e7ed7fd27a98e6d12bef5da72181a

  • SHA512

    286737f8b8b731e66e8ac9cc3aee7e38ad8a6bd3666be23204a3a0908de1c27faa7d73974546eec061e7f3bcd6ae0c75743a342630c79e30c2c94be37f182ea0

  • SSDEEP

    12288:CJKuu0b2YF4NCI+48ykABbPCpmj+uJoSznCn:TqSz4I+48yVBbPCpmSgI

Score
10/10
luminosityrat

Malware Config

Targets

    • Target

      f9d78ddd7ef2f4200e83aa452d03192c_JaffaCakes118

    • Size

      411KB

    • MD5

      f9d78ddd7ef2f4200e83aa452d03192c

    • SHA1

      979824983e7ff0faf2c3f98c5ddad74c40d0ea7e

    • SHA256

      c98e242323138170045011f3ab41dc6a811e7ed7fd27a98e6d12bef5da72181a

    • SHA512

      286737f8b8b731e66e8ac9cc3aee7e38ad8a6bd3666be23204a3a0908de1c27faa7d73974546eec061e7f3bcd6ae0c75743a342630c79e30c2c94be37f182ea0

    • SSDEEP

      12288:CJKuu0b2YF4NCI+48ykABbPCpmj+uJoSznCn:TqSz4I+48yVBbPCpmSgI

    Score
    10/10
    luminosityrat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks