Overview

overview

6

Static

static

3

536adab114...18.exe

windows7-x64

6

536adab114...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    536adab114230d71772dde65bb8fd430_JaffaCakes118

  • Size

    43KB

  • Sample

    241017-ykh7yashjd

  • MD5

    536adab114230d71772dde65bb8fd430

  • SHA1

    71cf0fb24bc32e0af9c1b0a4261b38cab7f4249a

  • SHA256

    ed1ff5939fe0282f66ac8eb889185ea6d92d61e6f5900ab3b12d92ede87c3b7c

  • SHA512

    e5df7527d43c3bd01fb8065dba6c30eb82a4298f4295b0cbc467bf1223629c13120cac11a77323bf254b66203d184d55c0e04e2254851a90d44530c348574b0a

  • SSDEEP

    768:/U41m9QqjUp64GCUB3SaqI1ybIp+zIXX+/RVCRTWbcshyHsPkPDP:t1VqjUp64GfVSqQbIcRVCfgVsr

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      536adab114230d71772dde65bb8fd430_JaffaCakes118

    • Size

      43KB

    • MD5

      536adab114230d71772dde65bb8fd430

    • SHA1

      71cf0fb24bc32e0af9c1b0a4261b38cab7f4249a

    • SHA256

      ed1ff5939fe0282f66ac8eb889185ea6d92d61e6f5900ab3b12d92ede87c3b7c

    • SHA512

      e5df7527d43c3bd01fb8065dba6c30eb82a4298f4295b0cbc467bf1223629c13120cac11a77323bf254b66203d184d55c0e04e2254851a90d44530c348574b0a

    • SSDEEP

      768:/U41m9QqjUp64GCUB3SaqI1ybIp+zIXX+/RVCRTWbcshyHsPkPDP:t1VqjUp64GfVSqQbIcRVCfgVsr

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks