Overview

overview

7

Static

static

3

316064a2f5...18.exe

windows7-x64

7

316064a2f5...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    316064a2f5510c2e10b0312aa4014039_JaffaCakes118

  • Size

    355KB

  • Sample

    240709-wfs58swfql

  • MD5

    316064a2f5510c2e10b0312aa4014039

  • SHA1

    532bf5273e6ab2431c163734f3db38bc184d1c8f

  • SHA256

    72231235248da004a908a8b8449d6bbccadbd084b0e5e557a035daba5092db34

  • SHA512

    9420699db8bc312b796de45728c8d58f09ef99aceb108ab1a52d86cc5866f199182af040f694164fbc6ad3f366e1ca4160cd2cb702488b9dcba92a0da5c32872

  • SSDEEP

    6144:ZJLwtVGJcKxEz7QYV/hcnAptNU3Rwd+7bqJOkrayVpR:XLAVKEz75/9ptGyCbqJ6yB

Score
7/10
persistence

Malware Config

Targets

    • Target

      316064a2f5510c2e10b0312aa4014039_JaffaCakes118

    • Size

      355KB

    • MD5

      316064a2f5510c2e10b0312aa4014039

    • SHA1

      532bf5273e6ab2431c163734f3db38bc184d1c8f

    • SHA256

      72231235248da004a908a8b8449d6bbccadbd084b0e5e557a035daba5092db34

    • SHA512

      9420699db8bc312b796de45728c8d58f09ef99aceb108ab1a52d86cc5866f199182af040f694164fbc6ad3f366e1ca4160cd2cb702488b9dcba92a0da5c32872

    • SSDEEP

      6144:ZJLwtVGJcKxEz7QYV/hcnAptNU3Rwd+7bqJOkrayVpR:XLAVKEz75/9ptGyCbqJ6yB

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks