Overview

overview

7

Static

static

3

190002220a...18.exe

windows7-x64

7

190002220a...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    190002220a1f61dd13067772da924f0e_JaffaCakes118

  • Size

    20KB

  • Sample

    240628-gfp19atgqf

  • MD5

    190002220a1f61dd13067772da924f0e

  • SHA1

    76a8e483a55994493cf30f8f3b789c769150d390

  • SHA256

    ecb2d669bb8fa12340c6374c19d6151a53a525eae42c32875044304cd79c157e

  • SHA512

    1f221c29889f695807870af16dbf10be169c8be203e8adb2310f51dbc201a188807c996fc41fe346ae661bbac6114a7c6244376c6d5828ca7a5b92b165187a89

  • SSDEEP

    192:y1fUL12bSOpKLbeca/aiRangmw+6TTe5nr0i5ZFOEbvEllpAHgT8GI0U8RHZ+:Yw23pKHla/ZRYnl5nrBHOyvClYKLUz

Score
7/10
persistence

Malware Config

Targets

    • Target

      190002220a1f61dd13067772da924f0e_JaffaCakes118

    • Size

      20KB

    • MD5

      190002220a1f61dd13067772da924f0e

    • SHA1

      76a8e483a55994493cf30f8f3b789c769150d390

    • SHA256

      ecb2d669bb8fa12340c6374c19d6151a53a525eae42c32875044304cd79c157e

    • SHA512

      1f221c29889f695807870af16dbf10be169c8be203e8adb2310f51dbc201a188807c996fc41fe346ae661bbac6114a7c6244376c6d5828ca7a5b92b165187a89

    • SSDEEP

      192:y1fUL12bSOpKLbeca/aiRangmw+6TTe5nr0i5ZFOEbvEllpAHgT8GI0U8RHZ+:Yw23pKHla/ZRYnl5nrBHOyvClYKLUz

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks