Overview

overview

10

Static

static

3

ea8e417fd5...18.exe

windows7-x64

10

ea8e417fd5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea8e417fd5eecc88a151a0015448c0e4_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240919-en3k7szfqe

  • MD5

    ea8e417fd5eecc88a151a0015448c0e4

  • SHA1

    f458b419ae7a56798c3d008ec9a234ba9b11bc79

  • SHA256

    94b2d8bfcb514b325b76aacc1539dcb3f2ae1da08598e5ec8c8d318330552453

  • SHA512

    a3a6c3c5159f2c6fdd75b44ee319ee35b400c74ea9a0b1a1f5553a3ab9a0d0f0f17b541598694f01134d07e284042d2be4f911f482347224906a69b7ed6b01da

  • SSDEEP

    24576:FdAxqZSTCm6ZagF8B6YEbWfFUTdAxqZSTCm6ZagF8B6YEbWfFUp:fd016Iq86ZW8d016Iq86ZWo

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ea8e417fd5eecc88a151a0015448c0e4_JaffaCakes118

    • Size

      1.1MB

    • MD5

      ea8e417fd5eecc88a151a0015448c0e4

    • SHA1

      f458b419ae7a56798c3d008ec9a234ba9b11bc79

    • SHA256

      94b2d8bfcb514b325b76aacc1539dcb3f2ae1da08598e5ec8c8d318330552453

    • SHA512

      a3a6c3c5159f2c6fdd75b44ee319ee35b400c74ea9a0b1a1f5553a3ab9a0d0f0f17b541598694f01134d07e284042d2be4f911f482347224906a69b7ed6b01da

    • SSDEEP

      24576:FdAxqZSTCm6ZagF8B6YEbWfFUTdAxqZSTCm6ZagF8B6YEbWfFUp:fd016Iq86ZW8d016Iq86ZWo

    Score
    10/10
    discoveryevasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks