Overview

overview

7

Static

static

1

3896858b18...18.exe

windows7-x64

7

3896858b18...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3896858b1863281410edb6c0f9a853a1_JaffaCakes118

  • Size

    364KB

  • Sample

    240711-lkdk8s1ajr

  • MD5

    3896858b1863281410edb6c0f9a853a1

  • SHA1

    cfa451bc441fd648da21d3c4483e05983013e24e

  • SHA256

    d0034e007be4e84999566a52934d064fa9896650529e01c55e63080b64e30eb7

  • SHA512

    6649e9e4468a08f4f8d73bc4caf6560622933ba1a8b560ca0bed78293bcf395919115038496cb7beb1639b87d4f679da7472c62940e4c351e73b2b5c065def4e

  • SSDEEP

    6144:bbCdh2yzFFgIX0zE9NKFEWNFfK4CS0NwI32+fFBFFrkiHw:bmdAWgIXxcXNkjN3Zf1Frjw

Score
7/10
persistence

Malware Config

Targets

    • Target

      3896858b1863281410edb6c0f9a853a1_JaffaCakes118

    • Size

      364KB

    • MD5

      3896858b1863281410edb6c0f9a853a1

    • SHA1

      cfa451bc441fd648da21d3c4483e05983013e24e

    • SHA256

      d0034e007be4e84999566a52934d064fa9896650529e01c55e63080b64e30eb7

    • SHA512

      6649e9e4468a08f4f8d73bc4caf6560622933ba1a8b560ca0bed78293bcf395919115038496cb7beb1639b87d4f679da7472c62940e4c351e73b2b5c065def4e

    • SSDEEP

      6144:bbCdh2yzFFgIX0zE9NKFEWNFfK4CS0NwI32+fFBFFrkiHw:bmdAWgIXxcXNkjN3Zf1Frjw

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks