Overview

overview

8

Static

static

3

87c89e4924...18.exe

windows7-x64

8

87c89e4924...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87c89e492475b302a5b0ae8b9e7a7394_JaffaCakes118

  • Size

    93KB

  • Sample

    240810-1kkf4szaqj

  • MD5

    87c89e492475b302a5b0ae8b9e7a7394

  • SHA1

    47eaebb9f7696501a008b88efdf14ce242b2ac2a

  • SHA256

    a4b228ee392a425abbe679ee4a25951bb1b434fad6ccca5396e346e5ebec8af3

  • SHA512

    c2a114992d4aab7d50e473a338b2056c217c6b15f9b58bf8eb20189d38f0fb8469e94b664c068b5160d92697bd35bc5cb7f2b6d97db1bb99b84780b87125d2b0

  • SSDEEP

    1536:wF61lvMqziQ3C6kKEgHFy4sEg/qHUnuBuczFbznTvK2fHioBzkXmvc3hH6bB26ex:910Q3MK1Hc/q0nusczFzhHDwAcRHg2rx

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      87c89e492475b302a5b0ae8b9e7a7394_JaffaCakes118

    • Size

      93KB

    • MD5

      87c89e492475b302a5b0ae8b9e7a7394

    • SHA1

      47eaebb9f7696501a008b88efdf14ce242b2ac2a

    • SHA256

      a4b228ee392a425abbe679ee4a25951bb1b434fad6ccca5396e346e5ebec8af3

    • SHA512

      c2a114992d4aab7d50e473a338b2056c217c6b15f9b58bf8eb20189d38f0fb8469e94b664c068b5160d92697bd35bc5cb7f2b6d97db1bb99b84780b87125d2b0

    • SSDEEP

      1536:wF61lvMqziQ3C6kKEgHFy4sEg/qHUnuBuczFbznTvK2fHioBzkXmvc3hH6bB26ex:910Q3MK1Hc/q0nusczFzhHDwAcRHg2rx

    Score
    8/10
    discoverypersistence

    • Drops file in Drivers directory

    • Server Software Component: Terminal Services DLL

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks