Overview

overview

7

Static

static

3

34a5d4b0be...18.exe

windows7-x64

7

34a5d4b0be...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34a5d4b0be4e282c6e61df31dcdbc457_JaffaCakes118

  • Size

    20KB

  • Sample

    240710-n9p2nswhnp

  • MD5

    34a5d4b0be4e282c6e61df31dcdbc457

  • SHA1

    5e99979fb9e50f0ad940d8b01d6bb92061a3ae26

  • SHA256

    8c6fac0a9142c1fe2f0c89ed05604ccb95bad0693d49ae657141cb5abe338b6f

  • SHA512

    6237e7a7a48d037dd213b6a16417d1dc056ae2a2d7ceab15c4269441d9f5a6802395b69e00deef177a5a6a2ab04f33375dcdad2c4b5bd3cdbfe0488bd546c434

  • SSDEEP

    384:QdrAerpKH5Mw6zqtq7x4826/24qqdiAufqexqpu+cUicAa4ckOK:QWH5Lg7a6URMNAj

Score
7/10
persistence

Malware Config

Targets

    • Target

      34a5d4b0be4e282c6e61df31dcdbc457_JaffaCakes118

    • Size

      20KB

    • MD5

      34a5d4b0be4e282c6e61df31dcdbc457

    • SHA1

      5e99979fb9e50f0ad940d8b01d6bb92061a3ae26

    • SHA256

      8c6fac0a9142c1fe2f0c89ed05604ccb95bad0693d49ae657141cb5abe338b6f

    • SHA512

      6237e7a7a48d037dd213b6a16417d1dc056ae2a2d7ceab15c4269441d9f5a6802395b69e00deef177a5a6a2ab04f33375dcdad2c4b5bd3cdbfe0488bd546c434

    • SSDEEP

      384:QdrAerpKH5Mw6zqtq7x4826/24qqdiAufqexqpu+cUicAa4ckOK:QWH5Lg7a6URMNAj

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks