Overview

overview

7

Static

static

1

c1b378cd11...18.exe

windows7-x64

7

c1b378cd11...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1b378cd114defdb45267441ad1e2a69_JaffaCakes118

  • Size

    311KB

  • Sample

    240825-14epzazdnk

  • MD5

    c1b378cd114defdb45267441ad1e2a69

  • SHA1

    f34966c34e72401ec10fbe91a3182dfd011414f7

  • SHA256

    df13a65ac0e7b2fa8bb14d1c1b1640819336f814b58d8250a2de85a22f009940

  • SHA512

    0f413dac3771169998146a02f8e927e956b8723aba867da11087de59d7a5fd8e41f050cf5e07a6d4df056ab582a2b9689fa70c36a3cde9fe4698e14c1743ded1

  • SSDEEP

    6144:IsbB0Whz9/wAS64AqauGp2hpEwwI41gY9s6:IsBZtVSz0uu6gIK

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      c1b378cd114defdb45267441ad1e2a69_JaffaCakes118

    • Size

      311KB

    • MD5

      c1b378cd114defdb45267441ad1e2a69

    • SHA1

      f34966c34e72401ec10fbe91a3182dfd011414f7

    • SHA256

      df13a65ac0e7b2fa8bb14d1c1b1640819336f814b58d8250a2de85a22f009940

    • SHA512

      0f413dac3771169998146a02f8e927e956b8723aba867da11087de59d7a5fd8e41f050cf5e07a6d4df056ab582a2b9689fa70c36a3cde9fe4698e14c1743ded1

    • SSDEEP

      6144:IsbB0Whz9/wAS64AqauGp2hpEwwI41gY9s6:IsBZtVSz0uu6gIK

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks