Overview

overview

6

Static

static

3

51fdb3674c...18.exe

windows7-x64

6

51fdb3674c...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    51fdb3674cb0df3596f3e57019cc79d0_JaffaCakes118

  • Size

    152KB

  • Sample

    241017-n91s6swgjb

  • MD5

    51fdb3674cb0df3596f3e57019cc79d0

  • SHA1

    eb7281dc200d188bc6fb064962ee41f6744d064b

  • SHA256

    a94294c2c6a088cd9457df7915b84987853aa4dea456efa201f281d71c3abd32

  • SHA512

    cd39222730f40b5bd961b1c58ac93bc82fdd32646f2b4285b4f0eb49b26c613ca303ae7f21b811aa12710e64e5a8611db5fccacde93e4ed76878396b2079fb92

  • SSDEEP

    3072:YlO/y2anrvrQK2Tzp+DzU4147QMPWzEt2Aeq2DB1DLSKp/:lUrvrQNHp+Dm7Qdq8

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      51fdb3674cb0df3596f3e57019cc79d0_JaffaCakes118

    • Size

      152KB

    • MD5

      51fdb3674cb0df3596f3e57019cc79d0

    • SHA1

      eb7281dc200d188bc6fb064962ee41f6744d064b

    • SHA256

      a94294c2c6a088cd9457df7915b84987853aa4dea456efa201f281d71c3abd32

    • SHA512

      cd39222730f40b5bd961b1c58ac93bc82fdd32646f2b4285b4f0eb49b26c613ca303ae7f21b811aa12710e64e5a8611db5fccacde93e4ed76878396b2079fb92

    • SSDEEP

      3072:YlO/y2anrvrQK2Tzp+DzU4147QMPWzEt2Aeq2DB1DLSKp/:lUrvrQNHp+Dm7Qdq8

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks