Overview

overview

6

Static

static

3

4422d891cf...18.exe

windows7-x64

6

4422d891cf...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    4422d891cf67d89ee8280f96d7209040_JaffaCakes118

  • Size

    235KB

  • Sample

    241014-zphyeawclb

  • MD5

    4422d891cf67d89ee8280f96d7209040

  • SHA1

    e5dffc1590fda287da970813fee47c702059aa9e

  • SHA256

    d2fbe19b8badf88d2e5884310090078be6ec99ec1a92f08839e468177db557c4

  • SHA512

    426a13f0ec7edc7eef8bac7a20744e3be8eccc5080989d792c9606c49e78a6f0e5d692d507a58880fe66464c9fd673c39fedbefe5c90d796c0d83688a53732bc

  • SSDEEP

    3072:nEMcKiwevRJyAgCdTAUl9V+nQESeWBxFXvr55enEl9/V7Azd:nL9mRJyAsUlVBxRt79KB

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      4422d891cf67d89ee8280f96d7209040_JaffaCakes118

    • Size

      235KB

    • MD5

      4422d891cf67d89ee8280f96d7209040

    • SHA1

      e5dffc1590fda287da970813fee47c702059aa9e

    • SHA256

      d2fbe19b8badf88d2e5884310090078be6ec99ec1a92f08839e468177db557c4

    • SHA512

      426a13f0ec7edc7eef8bac7a20744e3be8eccc5080989d792c9606c49e78a6f0e5d692d507a58880fe66464c9fd673c39fedbefe5c90d796c0d83688a53732bc

    • SSDEEP

      3072:nEMcKiwevRJyAgCdTAUl9V+nQESeWBxFXvr55enEl9/V7Azd:nL9mRJyAsUlVBxRt79KB

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks