Overview

overview

10

Static

static

7

fd55b69e0f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd55b69e0fb1e32934d251dc8656359d_JaffaCakes118

  • Size

    351KB

  • Sample

    240420-wsy71sed32

  • MD5

    fd55b69e0fb1e32934d251dc8656359d

  • SHA1

    73be759ae3175e580dda183219f11aa168cda08c

  • SHA256

    f8270ea6ec4897866c460111ce080348a589f45a134d0b831dee8994045e2627

  • SHA512

    af2afd597b1ce5db6be16fb1796182fe9a0904563237b70a858742da29ae3ff3fda31d5a6f78993f8e1958539ed9dae3a7d180291bd2a70fae9ca392337f6f94

  • SSDEEP

    6144:Vlj7xsOKSkrKQc/RU7QzYFg7nJz3RszFSRdPanIHyVPKgpmsikng:7jO+CKiSbJSzFodPaNAgpg

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      fd55b69e0fb1e32934d251dc8656359d_JaffaCakes118

    • Size

      351KB

    • MD5

      fd55b69e0fb1e32934d251dc8656359d

    • SHA1

      73be759ae3175e580dda183219f11aa168cda08c

    • SHA256

      f8270ea6ec4897866c460111ce080348a589f45a134d0b831dee8994045e2627

    • SHA512

      af2afd597b1ce5db6be16fb1796182fe9a0904563237b70a858742da29ae3ff3fda31d5a6f78993f8e1958539ed9dae3a7d180291bd2a70fae9ca392337f6f94

    • SSDEEP

      6144:Vlj7xsOKSkrKQc/RU7QzYFg7nJz3RszFSRdPanIHyVPKgpmsikng:7jO+CKiSbJSzFodPaNAgpg

    Score
    10/10
    evasionpersistencetrojanupx

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Modifies WinLogon

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks