Overview

overview

7

Static

static

3

629a6d1937...18.exe

windows7-x64

7

629a6d1937...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    629a6d1937350ffc1b6058e749d35214_JaffaCakes118

  • Size

    307KB

  • Sample

    240521-jz97msdh94

  • MD5

    629a6d1937350ffc1b6058e749d35214

  • SHA1

    553c5619424ebeb8fa98d4ecb405b2eefcff5773

  • SHA256

    4af834b5d3f53485fc3df66af0ccf87b7fdd63944023fde7fbe6120255e5aeb0

  • SHA512

    dce235cd8906153f0db272e1e19c1f36da5d95c1229243fd67ad09ce9f34bb8389755cfa9cb1b85c8337156e2da9f160fc0088004b9cea0243af41bfefb6c7ce

  • SSDEEP

    6144:Ytj4qBy6cqJuzYrB4YbDgEtOLTSqT4aQWeWwBGE47WvWT:Kj3GcBvoEtQTS5aQWKh4i+T

Score
7/10
persistence

Malware Config

Targets

    • Target

      629a6d1937350ffc1b6058e749d35214_JaffaCakes118

    • Size

      307KB

    • MD5

      629a6d1937350ffc1b6058e749d35214

    • SHA1

      553c5619424ebeb8fa98d4ecb405b2eefcff5773

    • SHA256

      4af834b5d3f53485fc3df66af0ccf87b7fdd63944023fde7fbe6120255e5aeb0

    • SHA512

      dce235cd8906153f0db272e1e19c1f36da5d95c1229243fd67ad09ce9f34bb8389755cfa9cb1b85c8337156e2da9f160fc0088004b9cea0243af41bfefb6c7ce

    • SSDEEP

      6144:Ytj4qBy6cqJuzYrB4YbDgEtOLTSqT4aQWeWwBGE47WvWT:Kj3GcBvoEtQTS5aQWKh4i+T

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks