Overview

overview

10

Static

static

7

fb8710e624...18.exe

windows7-x64

10

fb8710e624...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb8710e6243b454552b2976008c0a21b_JaffaCakes118

  • Size

    15KB

  • Sample

    240420-ay3xhabf47

  • MD5

    fb8710e6243b454552b2976008c0a21b

  • SHA1

    7351629b0f0ccd436303ea0c69c8e88db7e5d55b

  • SHA256

    36cabe8bd095e4cb234d6d83aa964d2b74971dbe1f90b634cf0d1647aee76ec0

  • SHA512

    d843e1223a593cc35aa810a2b63489c13a857d4da937a8af1de21a90c1dc98c30c14dd96869c6f2ea9d53ce098b5002247582bfba6baacdb4a2cb9fcb3fb38af

  • SSDEEP

    384:03HFA/+6sarKcb/gXZhKslJEQYscJ568Ck:KHFQ+RaTYJhXJ75cJ5lC

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      fb8710e6243b454552b2976008c0a21b_JaffaCakes118

    • Size

      15KB

    • MD5

      fb8710e6243b454552b2976008c0a21b

    • SHA1

      7351629b0f0ccd436303ea0c69c8e88db7e5d55b

    • SHA256

      36cabe8bd095e4cb234d6d83aa964d2b74971dbe1f90b634cf0d1647aee76ec0

    • SHA512

      d843e1223a593cc35aa810a2b63489c13a857d4da937a8af1de21a90c1dc98c30c14dd96869c6f2ea9d53ce098b5002247582bfba6baacdb4a2cb9fcb3fb38af

    • SSDEEP

      384:03HFA/+6sarKcb/gXZhKslJEQYscJ568Ck:KHFQ+RaTYJhXJ75cJ5lC

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks