Overview

overview

7

Static

static

1

67cc1ee695...18.exe

windows7-x64

7

67cc1ee695...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67cc1ee6954bc310885f3effd0ad8c3d_JaffaCakes118

  • Size

    306KB

  • Sample

    240723-qx8z5awbng

  • MD5

    67cc1ee6954bc310885f3effd0ad8c3d

  • SHA1

    f52e92356cf32629fd51e2ad20b9d9621268c48a

  • SHA256

    fcd592517141da7d1b7591a10b66ce64b3984c20b7bd6f42fcc89fc8010682ad

  • SHA512

    e6ce345f382ca6ee1d8a737678583cdf067cc6863a2eec5699a2914269c44fe5e189261936c48b2f5676b9e1c3ca0311acd4778e102d7b065fe86533102fe562

  • SSDEEP

    6144:JZIK4d8HTqfyYbqVqrdHQO9qqXPNNyAzG9T7kVHb/y:JOKE8HD4RwO9qqfGAUT7kJb/y

Score
7/10
persistence

Malware Config

Targets

    • Target

      67cc1ee6954bc310885f3effd0ad8c3d_JaffaCakes118

    • Size

      306KB

    • MD5

      67cc1ee6954bc310885f3effd0ad8c3d

    • SHA1

      f52e92356cf32629fd51e2ad20b9d9621268c48a

    • SHA256

      fcd592517141da7d1b7591a10b66ce64b3984c20b7bd6f42fcc89fc8010682ad

    • SHA512

      e6ce345f382ca6ee1d8a737678583cdf067cc6863a2eec5699a2914269c44fe5e189261936c48b2f5676b9e1c3ca0311acd4778e102d7b065fe86533102fe562

    • SSDEEP

      6144:JZIK4d8HTqfyYbqVqrdHQO9qqXPNNyAzG9T7kVHb/y:JOKE8HD4RwO9qqfGAUT7kJb/y

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks