Overview

overview

7

Static

static

3

3101f72578...18.exe

windows7-x64

7

3101f72578...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3101f725787eedc25e3f1d323426c174_JaffaCakes118

  • Size

    190KB

  • Sample

    240709-tbpk5s1dqm

  • MD5

    3101f725787eedc25e3f1d323426c174

  • SHA1

    a85d695b060223ac0085f873c36b7dea395a33bf

  • SHA256

    726c3842a1ad26cceb24e33338da211fa3e42054f4d2ad37cfdacb542f951e2d

  • SHA512

    1e8e467d2a1acb15c2366e4b78e6d3b11cf50d4b489e7f742c5b05bdedb509e8ecadc70af5b3fd004d8d217fd6495da404c2adbeb49d749ae044e83fa9a9eb55

  • SSDEEP

    3072:g59NX5v+7Qz9sZW1mklOV3cDzHtgUVevVMjMYFUBRHaXNcV0cjwYuA3DrdrcU:gDDvrz9sI1m+OW/Htg39PRHaXNc0Yu0D

Score
7/10

Malware Config

Targets

    • Target

      3101f725787eedc25e3f1d323426c174_JaffaCakes118

    • Size

      190KB

    • MD5

      3101f725787eedc25e3f1d323426c174

    • SHA1

      a85d695b060223ac0085f873c36b7dea395a33bf

    • SHA256

      726c3842a1ad26cceb24e33338da211fa3e42054f4d2ad37cfdacb542f951e2d

    • SHA512

      1e8e467d2a1acb15c2366e4b78e6d3b11cf50d4b489e7f742c5b05bdedb509e8ecadc70af5b3fd004d8d217fd6495da404c2adbeb49d749ae044e83fa9a9eb55

    • SSDEEP

      3072:g59NX5v+7Qz9sZW1mklOV3cDzHtgUVevVMjMYFUBRHaXNcV0cjwYuA3DrdrcU:gDDvrz9sI1m+OW/Htg39PRHaXNc0Yu0D

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks