Overview

overview

7

Static

static

3

3d25b01609...18.exe

windows7-x64

7

3d25b01609...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d25b016095377841097e162e11bc5ab_JaffaCakes118

  • Size

    435KB

  • Sample

    240712-ncmkaatbjg

  • MD5

    3d25b016095377841097e162e11bc5ab

  • SHA1

    86176f7e3f6e970a509d5b14de97ded34f0296da

  • SHA256

    15bc9efd4712fbdd2175c9af54f616b0663f92a69ff75382d0d6260a6424837c

  • SHA512

    a44873358be9974622ab22eb65c09af8bfffbcba6807457f2544419911f3bcbc2c2999bea289123f8ac5ff3561162e2caf7852bd1663bc2c79d321f8eac632cf

  • SSDEEP

    12288:2n18DciPpxU7a9Gl4OvgJNWGgBfaTGuo5A4u9Y0qxPC0:2ODHPp67+W4OvgOG/xo5AMXP

Score
7/10
persistence

Malware Config

Targets

    • Target

      3d25b016095377841097e162e11bc5ab_JaffaCakes118

    • Size

      435KB

    • MD5

      3d25b016095377841097e162e11bc5ab

    • SHA1

      86176f7e3f6e970a509d5b14de97ded34f0296da

    • SHA256

      15bc9efd4712fbdd2175c9af54f616b0663f92a69ff75382d0d6260a6424837c

    • SHA512

      a44873358be9974622ab22eb65c09af8bfffbcba6807457f2544419911f3bcbc2c2999bea289123f8ac5ff3561162e2caf7852bd1663bc2c79d321f8eac632cf

    • SSDEEP

      12288:2n18DciPpxU7a9Gl4OvgJNWGgBfaTGuo5A4u9Y0qxPC0:2ODHPp67+W4OvgOG/xo5AMXP

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks