Overview

overview

6

Static

static

3

db2694bd7c...18.exe

windows7-x64

6

db2694bd7c...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    db2694bd7c086ed73f6ed2888fac52a5_JaffaCakes118

  • Size

    41KB

  • Sample

    240911-y5klha1gla

  • MD5

    db2694bd7c086ed73f6ed2888fac52a5

  • SHA1

    3e7e13866532c4b924e265ac0c7df6bd22a5f955

  • SHA256

    c838ce66f783c249b674336addb743df8565f8ca90c904e5f32bf8401dc4c360

  • SHA512

    b91f5b7ede7f1e8a353f32b2d21d56ecba2b062a75f29c07739b1f4228d35ce56fd7c066a38b8f1a94b6bd90e43ae7a448235ffab221692d2b8049f361d6a82c

  • SSDEEP

    768:QghGEX/ija+1IJmhh9F3oPg+8ZhjPyf+dmb84ioypo/VYCfsM18i:nGEmhhMY+3fewoo2uYCqi

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      db2694bd7c086ed73f6ed2888fac52a5_JaffaCakes118

    • Size

      41KB

    • MD5

      db2694bd7c086ed73f6ed2888fac52a5

    • SHA1

      3e7e13866532c4b924e265ac0c7df6bd22a5f955

    • SHA256

      c838ce66f783c249b674336addb743df8565f8ca90c904e5f32bf8401dc4c360

    • SHA512

      b91f5b7ede7f1e8a353f32b2d21d56ecba2b062a75f29c07739b1f4228d35ce56fd7c066a38b8f1a94b6bd90e43ae7a448235ffab221692d2b8049f361d6a82c

    • SSDEEP

      768:QghGEX/ija+1IJmhh9F3oPg+8ZhjPyf+dmb84ioypo/VYCfsM18i:nGEmhhMY+3fewoo2uYCqi

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks