Overview

overview

10

Static

static

3

6575395cff...18.exe

windows7-x64

10

6575395cff...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6575395cffed8af89f7a8aad95ab22f7_JaffaCakes118

  • Size

    711KB

  • Sample

    240522-bf7y6sfe23

  • MD5

    6575395cffed8af89f7a8aad95ab22f7

  • SHA1

    1c11e008c2ffb447e651913f6a321b6df7c1f0e0

  • SHA256

    26df075aa765b16d25d56cd07d06d356eff21544b548c16e3591387151f2db52

  • SHA512

    e844cbceb5d0a9e72fc88ec18103c31dbe079cf3495f842cac3df260317bf9b68b6385fabd581ea5ebc9d2d6f44382e0987a9c0e95033634740992ff8afe3ade

  • SSDEEP

    12288:NmWhND9yJz+b1FcMLmp2ATTSsdNmWhND9yJz+b1FcMLmp2ATTSsdS:NmUNJyJqb1FcMap2ATT5rmUNJyJqb1FB

Score
10/10
persistence

Malware Config

Targets

    • Target

      6575395cffed8af89f7a8aad95ab22f7_JaffaCakes118

    • Size

      711KB

    • MD5

      6575395cffed8af89f7a8aad95ab22f7

    • SHA1

      1c11e008c2ffb447e651913f6a321b6df7c1f0e0

    • SHA256

      26df075aa765b16d25d56cd07d06d356eff21544b548c16e3591387151f2db52

    • SHA512

      e844cbceb5d0a9e72fc88ec18103c31dbe079cf3495f842cac3df260317bf9b68b6385fabd581ea5ebc9d2d6f44382e0987a9c0e95033634740992ff8afe3ade

    • SSDEEP

      12288:NmWhND9yJz+b1FcMLmp2ATTSsdNmWhND9yJz+b1FcMLmp2ATTSsdS:NmUNJyJqb1FcMap2ATT5rmUNJyJqb1FB

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

2
T1547

Winlogon Helper DLL

2
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

2
T1547

Winlogon Helper DLL

2
T1547.004

Defense Evasion

Modify Registry

3
T1112

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks