Overview

overview

7

Static

static

3

3ccedecabf...18.exe

windows7-x64

7

3ccedecabf...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ccedecabf588db686e99036d6336ab7_JaffaCakes118

  • Size

    311KB

  • Sample

    240712-lctx9axdnj

  • MD5

    3ccedecabf588db686e99036d6336ab7

  • SHA1

    a4cab6b7dedeb21bfb88e0408ee367f731d82f8f

  • SHA256

    dadb36f590653a50d349f9abe583f0f9d0f249968661ceb48e0b25b9ef115635

  • SHA512

    2f987151850449b4a9d98dfb6a5c1e070e34f6910b0eac48cb0222a358857197b893c8823577990e39f0feb58d0b0ed856b1511af7543f331a4d480ac7fac2f2

  • SSDEEP

    6144:ff1eAyPVMcyWzdiGTjj+5oUBl0AoYEcnOkwYKriv46fyRD:ff7iyWzdTCouq4EBGv4b

Score
7/10
persistence

Malware Config

Targets

    • Target

      3ccedecabf588db686e99036d6336ab7_JaffaCakes118

    • Size

      311KB

    • MD5

      3ccedecabf588db686e99036d6336ab7

    • SHA1

      a4cab6b7dedeb21bfb88e0408ee367f731d82f8f

    • SHA256

      dadb36f590653a50d349f9abe583f0f9d0f249968661ceb48e0b25b9ef115635

    • SHA512

      2f987151850449b4a9d98dfb6a5c1e070e34f6910b0eac48cb0222a358857197b893c8823577990e39f0feb58d0b0ed856b1511af7543f331a4d480ac7fac2f2

    • SSDEEP

      6144:ff1eAyPVMcyWzdiGTjj+5oUBl0AoYEcnOkwYKriv46fyRD:ff7iyWzdTCouq4EBGv4b

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks