Overview

overview

7

Static

static

1

472cdee29a...18.exe

windows7-x64

7

472cdee29a...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    472cdee29ac1d82eb25f27d2ccb16c84_JaffaCakes118

  • Size

    364KB

  • Sample

    240714-239z6aygmf

  • MD5

    472cdee29ac1d82eb25f27d2ccb16c84

  • SHA1

    1a0870074ed9d81be4d086dab3d81ce277a8ac47

  • SHA256

    085d7ee76f00c015e1402c1f67ef3f30b28ce8fcbdae910831782d1593ea34c6

  • SHA512

    49d2c619c2ba6b3e70da401d1131f4a0c0de0ba048909e6dcb4e72aaa98ff7d2ba0220bbfc4fc87db2300db9871432fc4e016aee4d4c7372896532a563f07bae

  • SSDEEP

    6144:zbCdh63yzFFhYIX0zE9NKFEWNFfK4CS0NwIP2+fFBFFrkiJ:zmd03WaIXxcXNkjNPZf1FrN

Score
7/10
persistence

Malware Config

Targets

    • Target

      472cdee29ac1d82eb25f27d2ccb16c84_JaffaCakes118

    • Size

      364KB

    • MD5

      472cdee29ac1d82eb25f27d2ccb16c84

    • SHA1

      1a0870074ed9d81be4d086dab3d81ce277a8ac47

    • SHA256

      085d7ee76f00c015e1402c1f67ef3f30b28ce8fcbdae910831782d1593ea34c6

    • SHA512

      49d2c619c2ba6b3e70da401d1131f4a0c0de0ba048909e6dcb4e72aaa98ff7d2ba0220bbfc4fc87db2300db9871432fc4e016aee4d4c7372896532a563f07bae

    • SSDEEP

      6144:zbCdh63yzFFhYIX0zE9NKFEWNFfK4CS0NwIP2+fFBFFrkiJ:zmd03WaIXxcXNkjNPZf1FrN

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks