Overview

overview

7

Static

static

1

afe4d8ef1b...18.exe

windows7-x64

7

afe4d8ef1b...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    afe4d8ef1bbdfaf824a24ba3f0fc73c8_JaffaCakes118

  • Size

    294KB

  • Sample

    240820-tjpaca1dke

  • MD5

    afe4d8ef1bbdfaf824a24ba3f0fc73c8

  • SHA1

    f98eb742689e68588dff781107bcd3b8976b7d88

  • SHA256

    267f9fde652b32ec5b6cb5ce8e3151f26ba086d7524f1b1064974d0bdedb901c

  • SHA512

    55d8d805311c39ee449e7686d6eb8d30fe8d5ca4fef6ad47bb8f660816a03b8fdc180ec85e906a18b790f1c599f0971ff358d98ba4a7f9a2d9c85663bda870a2

  • SSDEEP

    6144:BiGtsLQAlqNC+t+1PTG/qm/PgCnmUSFMhl4C+M/oI29IK6:0GtsLLt+I1PTEn/iUSFM8C+rI2b6

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      afe4d8ef1bbdfaf824a24ba3f0fc73c8_JaffaCakes118

    • Size

      294KB

    • MD5

      afe4d8ef1bbdfaf824a24ba3f0fc73c8

    • SHA1

      f98eb742689e68588dff781107bcd3b8976b7d88

    • SHA256

      267f9fde652b32ec5b6cb5ce8e3151f26ba086d7524f1b1064974d0bdedb901c

    • SHA512

      55d8d805311c39ee449e7686d6eb8d30fe8d5ca4fef6ad47bb8f660816a03b8fdc180ec85e906a18b790f1c599f0971ff358d98ba4a7f9a2d9c85663bda870a2

    • SSDEEP

      6144:BiGtsLQAlqNC+t+1PTG/qm/PgCnmUSFMhl4C+M/oI29IK6:0GtsLLt+I1PTEn/iUSFM8C+rI2b6

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks