Overview

overview

7

Static

static

3

2cc5d7e896...18.exe

windows7-x64

7

2cc5d7e896...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cc5d7e896e6548c6afecfb27056434e_JaffaCakes118

  • Size

    401KB

  • Sample

    240708-sa44rsxaqf

  • MD5

    2cc5d7e896e6548c6afecfb27056434e

  • SHA1

    60281a3ff37e8feb45f0a28ed290450de17de7b7

  • SHA256

    e01b49b31de1ad4dcacaa40489bf46f610f3e079d7645858d44209174401d700

  • SHA512

    c87ada33cbe7a5f8784e7b735b924509eb65e7169260e4d508f3d89a0733a7ac11c6b82631316dc3042fce820019ab734e358c2e0f99cbb35928a8b1c3ac8b26

  • SSDEEP

    12288:aTGeamYVgtj44mynIqAB1VDUG9RP5WqoSY:aKrmDRkqw1FhRhe

Score
7/10

Malware Config

Targets

    • Target

      2cc5d7e896e6548c6afecfb27056434e_JaffaCakes118

    • Size

      401KB

    • MD5

      2cc5d7e896e6548c6afecfb27056434e

    • SHA1

      60281a3ff37e8feb45f0a28ed290450de17de7b7

    • SHA256

      e01b49b31de1ad4dcacaa40489bf46f610f3e079d7645858d44209174401d700

    • SHA512

      c87ada33cbe7a5f8784e7b735b924509eb65e7169260e4d508f3d89a0733a7ac11c6b82631316dc3042fce820019ab734e358c2e0f99cbb35928a8b1c3ac8b26

    • SSDEEP

      12288:aTGeamYVgtj44mynIqAB1VDUG9RP5WqoSY:aKrmDRkqw1FhRhe

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks