Overview

overview

7

Static

static

3

969c3ca42c...18.exe

windows7-x64

7

969c3ca42c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118

  • Size

    40KB

  • Sample

    240814-sk8vpstfnl

  • MD5

    969c3ca42cc80eab913d19e9d06a356a

  • SHA1

    56cd63bc1e50d0f5074ed8cc9f25c2c165a72a66

  • SHA256

    ea17d008281947bbb79f6bae3dddec832ad05fdfdb645ab22d6dfa32368f421a

  • SHA512

    08a7c80fa5d67f50336ba7dfb448c73b4b4b689c83d995b3d1db30e0280e3028a18fcff36d4154716e440e9eec85fb79462243da9522b2d6695b0944572869bb

  • SSDEEP

    768:MV+v6/tdnSNxpZwHA30RmU4lS9sb75Rlk/Hg9MuT8N3UDr3pyp9:qpFdnSNHZAqUIdA+MuTFbkp

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118

    • Size

      40KB

    • MD5

      969c3ca42cc80eab913d19e9d06a356a

    • SHA1

      56cd63bc1e50d0f5074ed8cc9f25c2c165a72a66

    • SHA256

      ea17d008281947bbb79f6bae3dddec832ad05fdfdb645ab22d6dfa32368f421a

    • SHA512

      08a7c80fa5d67f50336ba7dfb448c73b4b4b689c83d995b3d1db30e0280e3028a18fcff36d4154716e440e9eec85fb79462243da9522b2d6695b0944572869bb

    • SSDEEP

      768:MV+v6/tdnSNxpZwHA30RmU4lS9sb75Rlk/Hg9MuT8N3UDr3pyp9:qpFdnSNHZAqUIdA+MuTFbkp

    Score
    7/10
    defense_evasiondiscovery

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks