Overview

overview

10

Static

static

3

cb8936aa73...18.exe

windows7-x64

10

cb8936aa73...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb8936aa73a1d6aa000629d6fd6bd849_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240830-yffw1s1hnh

  • MD5

    cb8936aa73a1d6aa000629d6fd6bd849

  • SHA1

    f0754c534252f7fd498fccfafa58f32cd0169fc6

  • SHA256

    79c36c10d56dcf72a921d90fc2ca11f57b9b4fc7f2f6e310f1e08b594242f8cb

  • SHA512

    4d190b18903d73159e3c4a6b3d5353043cab0a14b3d8f22e02bcc8702d36e9b9b57ab1f8dbe7495b44f480523be6819cc8cea2f73faf121828876a5d3eb56273

  • SSDEEP

    24576:PVeq5tyU+dBKjpx8nguS67JZY346nSaPgw/rsnI9Bg3Rj2OPQj8m6hR/GX:UqeUGPY683/nSanrsnckRjJm6hR0

Score
10/10
luminositydiscoverypersistencerat

Malware Config

Targets

    • Target

      cb8936aa73a1d6aa000629d6fd6bd849_JaffaCakes118

    • Size

      1.3MB

    • MD5

      cb8936aa73a1d6aa000629d6fd6bd849

    • SHA1

      f0754c534252f7fd498fccfafa58f32cd0169fc6

    • SHA256

      79c36c10d56dcf72a921d90fc2ca11f57b9b4fc7f2f6e310f1e08b594242f8cb

    • SHA512

      4d190b18903d73159e3c4a6b3d5353043cab0a14b3d8f22e02bcc8702d36e9b9b57ab1f8dbe7495b44f480523be6819cc8cea2f73faf121828876a5d3eb56273

    • SSDEEP

      24576:PVeq5tyU+dBKjpx8nguS67JZY346nSaPgw/rsnI9Bg3Rj2OPQj8m6hR/GX:UqeUGPY683/nSanrsnckRjJm6hR0

    Score
    10/10
    luminositydiscoverypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks