Overview

overview

6

Static

static

3

aa9a3e950f...18.exe

windows7-x64

6

aa9a3e950f...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa9a3e950f89d95d084a61eb3d4a7e37_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240819-l8822sybje

  • MD5

    aa9a3e950f89d95d084a61eb3d4a7e37

  • SHA1

    c6878743a953fecc4b0ad00fd5d8021f758808a4

  • SHA256

    cbe02fdbf5d505e903f340ccefe5c02a411616b4d4225a8e3fce934a5669449b

  • SHA512

    4f390f83be79239f9c64e8699d196b8051003d0e14661502a3e44d674215de029628a85835377e5400ef1d4f45ad863d5cf37cb9cf6b1cedb7de2755ba728955

  • SSDEEP

    12288:ZkgDGQvpDRrwVim70i9ECEHLixStkLhB4GZT7BZTwGlknTsR1Md+MfQ3ZPh6kPOx:Zpqatk1iAWsKdiNoL60HLtaD8

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      aa9a3e950f89d95d084a61eb3d4a7e37_JaffaCakes118

    • Size

      1.9MB

    • MD5

      aa9a3e950f89d95d084a61eb3d4a7e37

    • SHA1

      c6878743a953fecc4b0ad00fd5d8021f758808a4

    • SHA256

      cbe02fdbf5d505e903f340ccefe5c02a411616b4d4225a8e3fce934a5669449b

    • SHA512

      4f390f83be79239f9c64e8699d196b8051003d0e14661502a3e44d674215de029628a85835377e5400ef1d4f45ad863d5cf37cb9cf6b1cedb7de2755ba728955

    • SSDEEP

      12288:ZkgDGQvpDRrwVim70i9ECEHLixStkLhB4GZT7BZTwGlknTsR1Md+MfQ3ZPh6kPOx:Zpqatk1iAWsKdiNoL60HLtaD8

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks