Overview

overview

7

Static

static

3

191a6b87a4...18.exe

windows7-x64

7

191a6b87a4...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    191a6b87a4cfde43c418f8d3f8125dd4_JaffaCakes118

  • Size

    353KB

  • Sample

    240628-g554rsvgnc

  • MD5

    191a6b87a4cfde43c418f8d3f8125dd4

  • SHA1

    11caaae4b81e32475880bbb6162f36395ae3fd47

  • SHA256

    c5095774e6fc9813fe00408f84791557ff9e28ba1269745fb298c8a6b89a834b

  • SHA512

    16d781edab16408f5b45aa72f80e6cb03f4da22e4efb5ca3a1cc4114c2ddba7e03bc926696ade04a0e03b310f7a1fbb3b519a36a2fdcce64af71c21015dcfbb4

  • SSDEEP

    6144:e36wMPKotBFuFq/4b0OQ6iQHWSRpjvpyoWlRlDqDjl4AFyO7Qk79VulTweZ5q:SEPBF5/4c6ifSRPFWlRl2t4AyiQGA8eq

Score
7/10
persistence

Malware Config

Targets

    • Target

      191a6b87a4cfde43c418f8d3f8125dd4_JaffaCakes118

    • Size

      353KB

    • MD5

      191a6b87a4cfde43c418f8d3f8125dd4

    • SHA1

      11caaae4b81e32475880bbb6162f36395ae3fd47

    • SHA256

      c5095774e6fc9813fe00408f84791557ff9e28ba1269745fb298c8a6b89a834b

    • SHA512

      16d781edab16408f5b45aa72f80e6cb03f4da22e4efb5ca3a1cc4114c2ddba7e03bc926696ade04a0e03b310f7a1fbb3b519a36a2fdcce64af71c21015dcfbb4

    • SSDEEP

      6144:e36wMPKotBFuFq/4b0OQ6iQHWSRpjvpyoWlRlDqDjl4AFyO7Qk79VulTweZ5q:SEPBF5/4c6ifSRPFWlRl2t4AyiQGA8eq

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks