Overview

overview

10

Static

static

3

ee3ed79ffb...18.exe

windows7-x64

10

ee3ed79ffb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee3ed79ffb63344b6e50458b68a7814a_JaffaCakes118

  • Size

    51KB

  • Sample

    240920-xtcabasglg

  • MD5

    ee3ed79ffb63344b6e50458b68a7814a

  • SHA1

    15b1e629ef96ff8cba3fee127b8abc8a88b3f9df

  • SHA256

    00b25d24eff0819c9107218692e59043230871f275a7ce0490e56c786f8a1cf0

  • SHA512

    525a31f7bf4d9bac075da5084cfa18a26ec627d993eaf29cbeafae0be1b4516fd004bdd6c1b944bccded0d394f35e4348f314a3ab9bd155da18b8c7363119586

  • SSDEEP

    768:1EZDa925kKBd63UZ8wFqy5LfOtDBENtz9orSs8taDFItdHCjVLxzkoJRHuKqr:q//6mF7LfOtDaNtK+ykCtxzkoJRHulr

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ee3ed79ffb63344b6e50458b68a7814a_JaffaCakes118

    • Size

      51KB

    • MD5

      ee3ed79ffb63344b6e50458b68a7814a

    • SHA1

      15b1e629ef96ff8cba3fee127b8abc8a88b3f9df

    • SHA256

      00b25d24eff0819c9107218692e59043230871f275a7ce0490e56c786f8a1cf0

    • SHA512

      525a31f7bf4d9bac075da5084cfa18a26ec627d993eaf29cbeafae0be1b4516fd004bdd6c1b944bccded0d394f35e4348f314a3ab9bd155da18b8c7363119586

    • SSDEEP

      768:1EZDa925kKBd63UZ8wFqy5LfOtDBENtz9orSs8taDFItdHCjVLxzkoJRHuKqr:q//6mF7LfOtDaNtK+ykCtxzkoJRHulr

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks