Overview

overview

10

Static

static

7

ffcc337b15...18.exe

windows7-x64

10

ffcc337b15...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffcc337b15760783b0194a2e922be6a9_JaffaCakes118

  • Size

    91KB

  • Sample

    240421-v3sybagd41

  • MD5

    ffcc337b15760783b0194a2e922be6a9

  • SHA1

    2dc585bf3e1ae5f25430d6de73fe5bc1db7a7da1

  • SHA256

    883ea0e7560d42613b4b5d9cc1822e20faa02f5faf9770d7130223058c0a04d4

  • SHA512

    9dc8925ba4117c151523d7751a87aee6e71959670a85319c0b9ea0c1f23970a6be3da070800f39ead835ee6d5ec679212da0d2755a0f70fec2f804ea00d02b51

  • SSDEEP

    1536:IQoCtrPFES5hBEKyw3qzsfhfFlT2ZOcmFa3hd+g/:IytrlBREwZN8OcIaR3

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      ffcc337b15760783b0194a2e922be6a9_JaffaCakes118

    • Size

      91KB

    • MD5

      ffcc337b15760783b0194a2e922be6a9

    • SHA1

      2dc585bf3e1ae5f25430d6de73fe5bc1db7a7da1

    • SHA256

      883ea0e7560d42613b4b5d9cc1822e20faa02f5faf9770d7130223058c0a04d4

    • SHA512

      9dc8925ba4117c151523d7751a87aee6e71959670a85319c0b9ea0c1f23970a6be3da070800f39ead835ee6d5ec679212da0d2755a0f70fec2f804ea00d02b51

    • SSDEEP

      1536:IQoCtrPFES5hBEKyw3qzsfhfFlT2ZOcmFa3hd+g/:IytrlBREwZN8OcIaR3

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks