Overview

overview

7

Static

static

1

d67f134d93...18.exe

windows7-x64

7

d67f134d93...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d67f134d93c276d7e1c8cb189afa7dd1_JaffaCakes118

  • Size

    306KB

  • Sample

    240909-rpf5taseqr

  • MD5

    d67f134d93c276d7e1c8cb189afa7dd1

  • SHA1

    01778adb7a9579fa8cc0ea25df830311ea659e3a

  • SHA256

    fd2b2eb92a476b00b394050c7c70532f13166d09f3f07bbc375519e692080c88

  • SHA512

    0d7b91dc67aa79eaf82b60ef72e76feb3ca5e00e9e0c7f7460ef4fe1a6dc4ac9bbd2e80c4b93f4f151170db573681c3380eabfa6743fab93420abc6eaf964b66

  • SSDEEP

    6144:qtDl9w6qUgv2Nfq0vsw8Ux4RN0ahHyMREwPjOaPFmLP8f/O:qtDl+T4sM4RnUM9PjNPFmLa/O

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      d67f134d93c276d7e1c8cb189afa7dd1_JaffaCakes118

    • Size

      306KB

    • MD5

      d67f134d93c276d7e1c8cb189afa7dd1

    • SHA1

      01778adb7a9579fa8cc0ea25df830311ea659e3a

    • SHA256

      fd2b2eb92a476b00b394050c7c70532f13166d09f3f07bbc375519e692080c88

    • SHA512

      0d7b91dc67aa79eaf82b60ef72e76feb3ca5e00e9e0c7f7460ef4fe1a6dc4ac9bbd2e80c4b93f4f151170db573681c3380eabfa6743fab93420abc6eaf964b66

    • SSDEEP

      6144:qtDl9w6qUgv2Nfq0vsw8Ux4RN0ahHyMREwPjOaPFmLP8f/O:qtDl+T4sM4RnUM9PjNPFmLa/O

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks