Overview

overview

7

Static

static

1

44af325dee...18.exe

windows7-x64

7

44af325dee...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    44af325dee4a66d15d177c5c91302e63_JaffaCakes118

  • Size

    294KB

  • Sample

    240714-g764vascmg

  • MD5

    44af325dee4a66d15d177c5c91302e63

  • SHA1

    a9565c21f7a0969b933537cb898abfdb90ad7eed

  • SHA256

    5c273b26534a0149b5656bb1480653ac244082a0e7d4228610a1b4bdcddb1834

  • SHA512

    f7d5b73b48a8f0eff06f00853cdef20eff2403488fae552d7d57897d26a4d960b020fbf6a06d320921bed692c392c95072e55db8865d52ef8084adaed6d44318

  • SSDEEP

    6144:HZORo4dsnj6/y47qDdRWQ+9q6HPtNygzG9zrlW1AliU/9:HoKUsnDhRx+9q6vmg0zr0+liU/9

Score
7/10
persistence

Malware Config

Targets

    • Target

      44af325dee4a66d15d177c5c91302e63_JaffaCakes118

    • Size

      294KB

    • MD5

      44af325dee4a66d15d177c5c91302e63

    • SHA1

      a9565c21f7a0969b933537cb898abfdb90ad7eed

    • SHA256

      5c273b26534a0149b5656bb1480653ac244082a0e7d4228610a1b4bdcddb1834

    • SHA512

      f7d5b73b48a8f0eff06f00853cdef20eff2403488fae552d7d57897d26a4d960b020fbf6a06d320921bed692c392c95072e55db8865d52ef8084adaed6d44318

    • SSDEEP

      6144:HZORo4dsnj6/y47qDdRWQ+9q6HPtNygzG9zrlW1AliU/9:HoKUsnDhRx+9q6vmg0zr0+liU/9

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks