Overview

overview

7

Static

static

3

6627771352...18.exe

windows7-x64

7

6627771352...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    66277713523337a4803060671ad5fe90_JaffaCakes118

  • Size

    440KB

  • Sample

    240723-e6rlnaxfre

  • MD5

    66277713523337a4803060671ad5fe90

  • SHA1

    453cc131f9dce5128457a60720f720e1050084c1

  • SHA256

    7a92917183213d4cbd9e35595c88410f8d7f37858b0e93b52f36c514b7236f77

  • SHA512

    8a68f5628a3f8b8b57d5c62a6f059a5996bfd48f2c385085eb78a3fe42a0c246d1bceff23331d5c2808911ec96139aa81eee35236106b91f6b8d8164633de86d

  • SSDEEP

    12288:cG6+isHNHSycka9qwnQr2GnlWj5F0mTCWhe:cd+iEtO9nQrfnw0mPk

Score
7/10
persistence

Malware Config

Targets

    • Target

      66277713523337a4803060671ad5fe90_JaffaCakes118

    • Size

      440KB

    • MD5

      66277713523337a4803060671ad5fe90

    • SHA1

      453cc131f9dce5128457a60720f720e1050084c1

    • SHA256

      7a92917183213d4cbd9e35595c88410f8d7f37858b0e93b52f36c514b7236f77

    • SHA512

      8a68f5628a3f8b8b57d5c62a6f059a5996bfd48f2c385085eb78a3fe42a0c246d1bceff23331d5c2808911ec96139aa81eee35236106b91f6b8d8164633de86d

    • SSDEEP

      12288:cG6+isHNHSycka9qwnQr2GnlWj5F0mTCWhe:cd+iEtO9nQrfnw0mPk

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks