Overview

overview

7

Static

static

1

JaffaCakes...e4.exe

windows7-x64

7

JaffaCakes...e4.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_4137b9f676034fdc830aeb62b46a5be4
  • Size 403KB
  • Sample250127-tasleawkat
  • SHA256 ed49f061425c2a65d7b2100a0830dff03871fd5a71f61e7a4251f90ede75fc4e
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoverypersistence

Malware Config

Targets

    • Target
      JaffaCakes118_4137b9f676034fdc830aeb62b46a5be4
    • Size 403KB
    • SHA256 ed49f061425c2a65d7b2100a0830dff03871fd5a71f61e7a4251f90ede75fc4e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks