Overview

overview

8

Static

static

7

1c64c53006...18.exe

windows7-x64

8

1c64c53006...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c64c530062870283a6431d25f29010c_JaffaCakes118

  • Size

    187KB

  • Sample

    240701-y9lz5axgnd

  • MD5

    1c64c530062870283a6431d25f29010c

  • SHA1

    5143b00c6acc39dd497ed0efd587eccdcd4adb35

  • SHA256

    d845cd47e8dda4476e758239252705f33d90919ad995d0ec6ff3c6d0c9c0e7e4

  • SHA512

    e5bbae7e59d2638ef644ce022b1c8e9f69789b21f15390596d34356de019ba68098448210fa0f5025c70270c1e342f461f0d211ffaf5c4c812a0720e2667953d

  • SSDEEP

    3072:Dse+veSYLT6kC0RN5YfdtqswBciblNum3BjOfAp7DwCiMlofR3:DseOeShkjfY18sAlNum9cePxof

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      1c64c530062870283a6431d25f29010c_JaffaCakes118

    • Size

      187KB

    • MD5

      1c64c530062870283a6431d25f29010c

    • SHA1

      5143b00c6acc39dd497ed0efd587eccdcd4adb35

    • SHA256

      d845cd47e8dda4476e758239252705f33d90919ad995d0ec6ff3c6d0c9c0e7e4

    • SHA512

      e5bbae7e59d2638ef644ce022b1c8e9f69789b21f15390596d34356de019ba68098448210fa0f5025c70270c1e342f461f0d211ffaf5c4c812a0720e2667953d

    • SSDEEP

      3072:Dse+veSYLT6kC0RN5YfdtqswBciblNum3BjOfAp7DwCiMlofR3:DseOeShkjfY18sAlNum9cePxof

    Score
    8/10
    adwarepersistencestealerupx

    • Server Software Component: Terminal Services DLL

      persistence

    • Sets service image path in registry

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks