Overview

overview

7

Static

static

3

601cfa3adb...18.exe

windows7-x64

7

601cfa3adb...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    601cfa3adb5a3527886c78d30584c542_JaffaCakes118

  • Size

    315KB

  • Sample

    240720-mg52raxhjj

  • MD5

    601cfa3adb5a3527886c78d30584c542

  • SHA1

    15802675dc7f1095ce0ff15e5bd087899f8c46da

  • SHA256

    85a0895b94983c1704316794843e56f205e3f292206448c5f563997f5b74178f

  • SHA512

    a63d72459754916cb197cd74ae97f1393d231829ccca3210e2ca3152b85144616add8ac6b2b44411e23d4bb776d95bd74ed4da9f5585e06de5c05dac2868de33

  • SSDEEP

    6144:Hq3gCsyoqWYHtSWYnI+tnYDcMbY4FmNzNwm+MhUatxO1BcC1cR:Hq3tz1NonI+1Kb5KzNVNKPcnR

Score
7/10
persistence

Malware Config

Targets

    • Target

      601cfa3adb5a3527886c78d30584c542_JaffaCakes118

    • Size

      315KB

    • MD5

      601cfa3adb5a3527886c78d30584c542

    • SHA1

      15802675dc7f1095ce0ff15e5bd087899f8c46da

    • SHA256

      85a0895b94983c1704316794843e56f205e3f292206448c5f563997f5b74178f

    • SHA512

      a63d72459754916cb197cd74ae97f1393d231829ccca3210e2ca3152b85144616add8ac6b2b44411e23d4bb776d95bd74ed4da9f5585e06de5c05dac2868de33

    • SSDEEP

      6144:Hq3gCsyoqWYHtSWYnI+tnYDcMbY4FmNzNwm+MhUatxO1BcC1cR:Hq3tz1NonI+1Kb5KzNVNKPcnR

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks