Overview

overview

7

Static

static

1

4c05221ce3...18.exe

windows7-x64

7

4c05221ce3...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c05221ce3cd5511ec21022a4b44fcaa_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240716-ajjv3syfmf

  • MD5

    4c05221ce3cd5511ec21022a4b44fcaa

  • SHA1

    de119bb3213f66822f440154e4ea1da02e9d5851

  • SHA256

    48992b5eb4ffe324ebbfad87b94e1dc01549cf0e2452ac20eed44b76dedf6a16

  • SHA512

    181069ace42eb274ffba97b1354808c15a38c76862ac6644e2a7db27fcec3f6bb880ac30f0bb95486292a3cfe5e8f194d0c935784ce054f923d4452536d4275b

  • SSDEEP

    24576:hj+RJZKnxAH0Zpuu6dBfGEU7I7K6Bc+1mX3l1S5dzwV8C2BLJ:J4JZKnxAH0NkZGh7I7zGxX3l1S5Jy2Bt

Score
7/10

Malware Config

Targets

    • Target

      4c05221ce3cd5511ec21022a4b44fcaa_JaffaCakes118

    • Size

      1.0MB

    • MD5

      4c05221ce3cd5511ec21022a4b44fcaa

    • SHA1

      de119bb3213f66822f440154e4ea1da02e9d5851

    • SHA256

      48992b5eb4ffe324ebbfad87b94e1dc01549cf0e2452ac20eed44b76dedf6a16

    • SHA512

      181069ace42eb274ffba97b1354808c15a38c76862ac6644e2a7db27fcec3f6bb880ac30f0bb95486292a3cfe5e8f194d0c935784ce054f923d4452536d4275b

    • SSDEEP

      24576:hj+RJZKnxAH0Zpuu6dBfGEU7I7K6Bc+1mX3l1S5dzwV8C2BLJ:J4JZKnxAH0NkZGh7I7zGxX3l1S5Jy2Bt

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Use of msiexec (install) with remote resource

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks