Overview

overview

7

Static

static

3

02a7740de8...18.exe

windows7-x64

7

02a7740de8...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    02a7740de855d2790ee5df23f71005a9_JaffaCakes118

  • Size

    256KB

  • Sample

    240620-emgmcascmp

  • MD5

    02a7740de855d2790ee5df23f71005a9

  • SHA1

    f8e9dd23f4f2a78105f4d055ca3365156be816f8

  • SHA256

    5489fd95ccd263e254fe71ed8f227540854d3d6ac48c72a99cf384579cfca0cf

  • SHA512

    334996386958c8031019d991eb338c3ed07460378fc92f7e60ed4a673a39576950c27adb6f085b8a0524363edaba7b5c373c90e7caae452e62e915caa3c2d918

  • SSDEEP

    6144:SYlMkl24UDer8cAUJ66WH67T54LZ07M4M8NVb+A:rlMkSDU8UJV8uTS90oGvb3

Score
7/10
persistence

Malware Config

Targets

    • Target

      02a7740de855d2790ee5df23f71005a9_JaffaCakes118

    • Size

      256KB

    • MD5

      02a7740de855d2790ee5df23f71005a9

    • SHA1

      f8e9dd23f4f2a78105f4d055ca3365156be816f8

    • SHA256

      5489fd95ccd263e254fe71ed8f227540854d3d6ac48c72a99cf384579cfca0cf

    • SHA512

      334996386958c8031019d991eb338c3ed07460378fc92f7e60ed4a673a39576950c27adb6f085b8a0524363edaba7b5c373c90e7caae452e62e915caa3c2d918

    • SSDEEP

      6144:SYlMkl24UDer8cAUJ66WH67T54LZ07M4M8NVb+A:rlMkSDU8UJV8uTS90oGvb3

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks