Overview

overview

6

Static

static

3

67c1241161...18.exe

windows7-x64

6

67c1241161...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67c12411610eed2dd9574dc195b621ab_JaffaCakes118

  • Size

    36KB

  • Sample

    240723-qnc64avfme

  • MD5

    67c12411610eed2dd9574dc195b621ab

  • SHA1

    40660b536945c3294b1c91131ee339c41128b9ea

  • SHA256

    9d9587954d4c54519b244a7cf80a6b6f8c5a51bd34a27da5ed16bab3614ceb6e

  • SHA512

    66fd39dce3709747945d437083399c84f8cdb8f3ecd8b078f8bb623c1160fbf4f8c1a5ab4640a01f5b40ab6fc3536028dbc82307add8ef22423987af23fe6e80

  • SSDEEP

    768:GjWvh9mm+lrFxM9JxyLWm7iyGYdr7LiY7RSZod:aEcm8rFKALb71tdzP74yd

Score
6/10
persistence

Malware Config

Targets

    • Target

      67c12411610eed2dd9574dc195b621ab_JaffaCakes118

    • Size

      36KB

    • MD5

      67c12411610eed2dd9574dc195b621ab

    • SHA1

      40660b536945c3294b1c91131ee339c41128b9ea

    • SHA256

      9d9587954d4c54519b244a7cf80a6b6f8c5a51bd34a27da5ed16bab3614ceb6e

    • SHA512

      66fd39dce3709747945d437083399c84f8cdb8f3ecd8b078f8bb623c1160fbf4f8c1a5ab4640a01f5b40ab6fc3536028dbc82307add8ef22423987af23fe6e80

    • SSDEEP

      768:GjWvh9mm+lrFxM9JxyLWm7iyGYdr7LiY7RSZod:aEcm8rFKALb71tdzP74yd

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks