Overview

overview

7

Static

static

1

4126f45b6a...18.exe

windows7-x64

7

4126f45b6a...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4126f45b6a4d9033fcd2636459f99032_JaffaCakes118

  • Size

    355KB

  • Sample

    240713-ln16pswbll

  • MD5

    4126f45b6a4d9033fcd2636459f99032

  • SHA1

    7099bb0b20f64e0e8b130a9ebe3f821813c1edc4

  • SHA256

    a073fe206e8a50a495425452e200c9bb874f44f0b5933d4d277744ce8c587de1

  • SHA512

    f3a39c01a9a7fe2d3d893bb5b4720909ae310bfd584cb444ea5861d5762b6b52fe01f2b83adcf17e63c13ebb1f1d0e1f7a7eabe751fe8aea61877f8066d86f9e

  • SSDEEP

    6144:3X17fTKiCW9tXyCHPtOB1g0cL2Cn83czuwpUaFhQ8KvUH:n17bKA9tTHPgML2C83DCUm5ZH

Score
7/10
persistence

Malware Config

Targets

    • Target

      4126f45b6a4d9033fcd2636459f99032_JaffaCakes118

    • Size

      355KB

    • MD5

      4126f45b6a4d9033fcd2636459f99032

    • SHA1

      7099bb0b20f64e0e8b130a9ebe3f821813c1edc4

    • SHA256

      a073fe206e8a50a495425452e200c9bb874f44f0b5933d4d277744ce8c587de1

    • SHA512

      f3a39c01a9a7fe2d3d893bb5b4720909ae310bfd584cb444ea5861d5762b6b52fe01f2b83adcf17e63c13ebb1f1d0e1f7a7eabe751fe8aea61877f8066d86f9e

    • SSDEEP

      6144:3X17fTKiCW9tXyCHPtOB1g0cL2Cn83czuwpUaFhQ8KvUH:n17bKA9tTHPgML2C83DCUm5ZH

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks