Overview

overview

7

Static

static

3

4bf7765cda...18.exe

windows7-x64

7

4bf7765cda...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bf7765cda5fe17a1a14223cb379b44d_JaffaCakes118

  • Size

    250KB

  • Sample

    240715-3zvazaybkg

  • MD5

    4bf7765cda5fe17a1a14223cb379b44d

  • SHA1

    187501ab492e760d1cb59b3b7a28046e6fc54fa8

  • SHA256

    db7b8bdbf3b2fd7953f4d4018ddb88fff79e8d337122ad3a571e47fb8ea5a537

  • SHA512

    d0624d84650ece5fdf1bea7a65cda2d19f59afc3de41a485b95eab3d5a908677d55b061b4f11c4347ed7ad0ce11542bf30eba52456f8a0ec89d5e10706a7f4c1

  • SSDEEP

    3072:taObYrSD4kjua2DH4xW75GWp1icKAArDZz4N9GhbkrNEkdY6R3V766BCuJDWXaKI:taKMSD4Yuae9p0yN90QEIF76IW

Score
7/10
persistence

Malware Config

Targets

    • Target

      4bf7765cda5fe17a1a14223cb379b44d_JaffaCakes118

    • Size

      250KB

    • MD5

      4bf7765cda5fe17a1a14223cb379b44d

    • SHA1

      187501ab492e760d1cb59b3b7a28046e6fc54fa8

    • SHA256

      db7b8bdbf3b2fd7953f4d4018ddb88fff79e8d337122ad3a571e47fb8ea5a537

    • SHA512

      d0624d84650ece5fdf1bea7a65cda2d19f59afc3de41a485b95eab3d5a908677d55b061b4f11c4347ed7ad0ce11542bf30eba52456f8a0ec89d5e10706a7f4c1

    • SSDEEP

      3072:taObYrSD4kjua2DH4xW75GWp1icKAArDZz4N9GhbkrNEkdY6R3V766BCuJDWXaKI:taKMSD4Yuae9p0yN90QEIF76IW

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks