Overview

overview

7

Static

static

7

739252b2e2...18.exe

windows7-x64

7

739252b2e2...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    739252b2e222fe91d2edfd5d1cc28ed7_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240726-lzzf9atgmd

  • MD5

    739252b2e222fe91d2edfd5d1cc28ed7

  • SHA1

    bc20bf99c5350036de99351d9776bce432f43973

  • SHA256

    a578ae7a462a2fd261daeda50b0a72b4b372bee741e42e41f04c771579ba7276

  • SHA512

    3ce31a8dd262213be7002909bd3be340802dd3ebafe061ddb1030d1cf1e04f27098cab1036cac7ffea29b55a1cdb46d4ea33757b3d195a195f7aed412c2fd16a

  • SSDEEP

    24576:6YVweVtJL4qjvkdtUF1KgwgK6VZjpLKb7DiO9280R:6hCZs6MFgK6HpLGuGw

Score
7/10
discoverypersistencethemida

Malware Config

Targets

    • Target

      739252b2e222fe91d2edfd5d1cc28ed7_JaffaCakes118

    • Size

      1.1MB

    • MD5

      739252b2e222fe91d2edfd5d1cc28ed7

    • SHA1

      bc20bf99c5350036de99351d9776bce432f43973

    • SHA256

      a578ae7a462a2fd261daeda50b0a72b4b372bee741e42e41f04c771579ba7276

    • SHA512

      3ce31a8dd262213be7002909bd3be340802dd3ebafe061ddb1030d1cf1e04f27098cab1036cac7ffea29b55a1cdb46d4ea33757b3d195a195f7aed412c2fd16a

    • SSDEEP

      24576:6YVweVtJL4qjvkdtUF1KgwgK6VZjpLKb7DiO9280R:6hCZs6MFgK6HpLGuGw

    Score
    7/10
    discoverypersistencethemida

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks