Overview

overview

7

Static

static

3

fe2d09088d...18.exe

windows7-x64

7

fe2d09088d...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe2d09088dcd491e72b14b45a05a95f2_JaffaCakes118

  • Size

    132KB

  • Sample

    240421-chmxfsgc55

  • MD5

    fe2d09088dcd491e72b14b45a05a95f2

  • SHA1

    93be0ff158e270618d17f6baaa96a5a4a70541ab

  • SHA256

    261b673fac1034df189cffdb00b8001dc315ea45ce76a5c17e497c9276264500

  • SHA512

    fa196888c53ad7f4bb5450a823e1dac02dbc600f32dbb1e2e3834f77b6eeaae68f734a60ffc270e651d1b63b92f29a99c9a6fb4ca36858c3a96621c6b0e6dd78

  • SSDEEP

    3072:sStXGrfcaQHlJTjNa646nLbOgveBXDA1Nz/iORPC/n:sPfJolJ1V4cV2eNDM/

Score
7/10
persistence

Malware Config

Targets

    • Target

      fe2d09088dcd491e72b14b45a05a95f2_JaffaCakes118

    • Size

      132KB

    • MD5

      fe2d09088dcd491e72b14b45a05a95f2

    • SHA1

      93be0ff158e270618d17f6baaa96a5a4a70541ab

    • SHA256

      261b673fac1034df189cffdb00b8001dc315ea45ce76a5c17e497c9276264500

    • SHA512

      fa196888c53ad7f4bb5450a823e1dac02dbc600f32dbb1e2e3834f77b6eeaae68f734a60ffc270e651d1b63b92f29a99c9a6fb4ca36858c3a96621c6b0e6dd78

    • SSDEEP

      3072:sStXGrfcaQHlJTjNa646nLbOgveBXDA1Nz/iORPC/n:sPfJolJ1V4cV2eNDM/

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks