Overview

overview

7

Static

static

1

36216a1c98...18.exe

windows7-x64

7

36216a1c98...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36216a1c986812454909743cc34e7310_JaffaCakes118

  • Size

    330KB

  • Sample

    240710-yhmgksygpa

  • MD5

    36216a1c986812454909743cc34e7310

  • SHA1

    836043cda682196432b6bf2ff9ea0ee822065657

  • SHA256

    d42c8cb2c2a23cff3c7c382e917e638ed23733e11eef40d63164e7a95b70a945

  • SHA512

    1c4eb9199b89e360dcd25aed59c204cefc2c928bac6c19e4944e385b96fbcb5adda91f143a5a44434e0e90e5644a5b9e74708b429878ba9573f6fffa60135714

  • SSDEEP

    6144:8tEa7FUgpiyUXe2ZsD9eBVtQRlc12iVkIFzM9TLSDoC3FHvKHMDnE:8agFriym920jcc1f9Y9XS335vHw

Score
7/10
persistence

Malware Config

Targets

    • Target

      36216a1c986812454909743cc34e7310_JaffaCakes118

    • Size

      330KB

    • MD5

      36216a1c986812454909743cc34e7310

    • SHA1

      836043cda682196432b6bf2ff9ea0ee822065657

    • SHA256

      d42c8cb2c2a23cff3c7c382e917e638ed23733e11eef40d63164e7a95b70a945

    • SHA512

      1c4eb9199b89e360dcd25aed59c204cefc2c928bac6c19e4944e385b96fbcb5adda91f143a5a44434e0e90e5644a5b9e74708b429878ba9573f6fffa60135714

    • SSDEEP

      6144:8tEa7FUgpiyUXe2ZsD9eBVtQRlc12iVkIFzM9TLSDoC3FHvKHMDnE:8agFriym920jcc1f9Y9XS335vHw

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks