Overview

overview

8

Static

static

3

4c58a57f9f...18.exe

windows7-x64

8

4c58a57f9f...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c58a57f9ffc8cc8fc0250761351fdc1_JaffaCakes118

  • Size

    48KB

  • Sample

    240716-cdvrhazdrn

  • MD5

    4c58a57f9ffc8cc8fc0250761351fdc1

  • SHA1

    c1eee5a7e385835f66d43d26c924f00ef2554e83

  • SHA256

    4a5be5adedfc4b4823026078a58987555fa7f1aa1eae8ea39a3a9cf5f3722de4

  • SHA512

    3bfb1f7d985242e4a3cf94d93d01bf56b389932fb1e459888742b5eb19f15cdf49ee06864a3fcd9074403c35dab4f5b0dbd04dda99b826316b276bbb20454032

  • SSDEEP

    768:pglR2h33y+p3Tf2R1Z2U5Zz+Ds644HX8hzqdnbgVAh6rE8kbvaN:pgmUu3T2+DZ44HX8e425r0

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      4c58a57f9ffc8cc8fc0250761351fdc1_JaffaCakes118

    • Size

      48KB

    • MD5

      4c58a57f9ffc8cc8fc0250761351fdc1

    • SHA1

      c1eee5a7e385835f66d43d26c924f00ef2554e83

    • SHA256

      4a5be5adedfc4b4823026078a58987555fa7f1aa1eae8ea39a3a9cf5f3722de4

    • SHA512

      3bfb1f7d985242e4a3cf94d93d01bf56b389932fb1e459888742b5eb19f15cdf49ee06864a3fcd9074403c35dab4f5b0dbd04dda99b826316b276bbb20454032

    • SSDEEP

      768:pglR2h33y+p3Tf2R1Z2U5Zz+Ds644HX8hzqdnbgVAh6rE8kbvaN:pgmUu3T2+DZ44HX8e425r0

    Score
    8/10
    evasionpersistence

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks