kronos | 4e2e2178b33c088912a8f271f626969e38b586b5fddbe21f464dc7ee453073a5 | Triage™

Login
Reports

Overview

overview

Static

static

3

JaffaCakes...f0.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_2557cdb9f495107cacba536a0338d5f0
Size 388KB
Sample250726-2dnqmadp2w
SHA256 4e2e2178b33c088912a8f271f626969e38b586b5fddbe21f464dc7ee453073a5
MD5 2557cdb9f495107cacba536a0338d5f0
SHA1 7a034ec992d17c6e7bd0ca97121585be1f66fca2
SHA512 5bf37419495bd623a4f51c03c720bbfb75f06f6522a5db24f99b41d9034912a0de35bb64e94f81c2882165c74a9d34aa9b4af9f5e36941a8924913eba4106687
SSDEEP 6144:LYHeIdOLd7RI0zjnyXKzAzEVJXW2PQwpU7k95fcLlfXDTGqAed:LYHe7RI/KjnZRm7gfs
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kronos banker botnet discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_2557cdb9f495107cacba536a0338d5f0.exe

Resource

win10v2004-20250619-en

windows10-2004-x64

11 signatures

150 seconds

kronos banker botnet discovery persistence

Malware Config

Targets

- Target
  JaffaCakes118_2557cdb9f495107cacba536a0338d5f0
- Size 388KB
- SHA256 4e2e2178b33c088912a8f271f626969e38b586b5fddbe21f464dc7ee453073a5
- MD5 2557cdb9f495107cacba536a0338d5f0
- SHA1 7a034ec992d17c6e7bd0ca97121585be1f66fca2
- SHA512 5bf37419495bd623a4f51c03c720bbfb75f06f6522a5db24f99b41d9034912a0de35bb64e94f81c2882165c74a9d34aa9b4af9f5e36941a8924913eba4106687
- SSDEEP 6144:LYHeIdOLd7RI0zjnyXKzAzEVJXW2PQwpU7k95fcLlfXDTGqAed:LYHe7RI/KjnZRm7gfs
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kronos banker botnet discovery persistence
- Kronos
  banker botnet kronos
- Kronos family
  kronos
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

kronosbankerbotnetdiscoverypersistence

© 2018-2026

Terms | Privacy