Overview

overview

7

Static

static

3

b1f48496d0...18.exe

windows7-x64

7

b1f48496d0...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1f48496d01f9bbb223e8374003a7396_JaffaCakes118

  • Size

    356KB

  • Sample

    240821-d4zntayakg

  • MD5

    b1f48496d01f9bbb223e8374003a7396

  • SHA1

    5754c20c97f7a9fc6e4e9bfd81f24a8edf2c8792

  • SHA256

    9c0c96f9f29d774a895a3e47246979185092a3b80730fef86f0a9e6ee811e05d

  • SHA512

    67789c690d7319bf2eed860db96bca71d65cf1dc96570f1a6366fd2120404df6e429e85a7bf450eb3277aa1ae352d6b5ff355b5c9965031d249e3a69a13c5377

  • SSDEEP

    6144:7vbx8gINUlaYTP0WHrXwSZzJvx8kPQ9gj631LCSN6G:7DINUJPzHTwox8KXj61/NL

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      b1f48496d01f9bbb223e8374003a7396_JaffaCakes118

    • Size

      356KB

    • MD5

      b1f48496d01f9bbb223e8374003a7396

    • SHA1

      5754c20c97f7a9fc6e4e9bfd81f24a8edf2c8792

    • SHA256

      9c0c96f9f29d774a895a3e47246979185092a3b80730fef86f0a9e6ee811e05d

    • SHA512

      67789c690d7319bf2eed860db96bca71d65cf1dc96570f1a6366fd2120404df6e429e85a7bf450eb3277aa1ae352d6b5ff355b5c9965031d249e3a69a13c5377

    • SSDEEP

      6144:7vbx8gINUlaYTP0WHrXwSZzJvx8kPQ9gj631LCSN6G:7DINUJPzHTwox8KXj61/NL

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks