Overview

overview

10

Static

static

3

fbf3644dfd...18.exe

windows7-x64

10

fbf3644dfd...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbf3644dfd5e4421b34698c3f19312fe_JaffaCakes118

  • Size

    61KB

  • Sample

    240420-fb4s6sgg54

  • MD5

    fbf3644dfd5e4421b34698c3f19312fe

  • SHA1

    d50e4d40a6e17c01b5ba1df316e7df017c65f326

  • SHA256

    d45b7703dc2c199a67143dcf707f19e1a7fb4f4aef31c1ed1675902cf17babb9

  • SHA512

    21d068fd37d9f4cab85904185af6fe849980edaf16516154a82714a24048fd4304f324c2e1f55ac5d763f21535d3a1f6be20a77409c34672b44a4c03749f3559

  • SSDEEP

    768:D1TOLVgCOKpd0iojI7RWsxO5Uy6nq3d7aFmnAyWIH56:RTSO6647RW6OYMOiAzIM

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      fbf3644dfd5e4421b34698c3f19312fe_JaffaCakes118

    • Size

      61KB

    • MD5

      fbf3644dfd5e4421b34698c3f19312fe

    • SHA1

      d50e4d40a6e17c01b5ba1df316e7df017c65f326

    • SHA256

      d45b7703dc2c199a67143dcf707f19e1a7fb4f4aef31c1ed1675902cf17babb9

    • SHA512

      21d068fd37d9f4cab85904185af6fe849980edaf16516154a82714a24048fd4304f324c2e1f55ac5d763f21535d3a1f6be20a77409c34672b44a4c03749f3559

    • SSDEEP

      768:D1TOLVgCOKpd0iojI7RWsxO5Uy6nq3d7aFmnAyWIH56:RTSO6647RW6OYMOiAzIM

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks