Overview

overview

10

Static

static

3

23944151ae...18.exe

windows7-x64

10

23944151ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    23944151aeccbf9ddc4bcd620bffc571_JaffaCakes118

  • Size

    261KB

  • Sample

    240703-yr2b4avhrq

  • MD5

    23944151aeccbf9ddc4bcd620bffc571

  • SHA1

    09ec5f79fa4a7da28a671aa89a26665e6e8ff991

  • SHA256

    1f5c8bef69b72c5b4534c6801964c5751da0fa3cdf4266efaa8c9351a80ed505

  • SHA512

    7cd5cf3be02ad19bf0f6925ee1f41cb480f4c48224ba183512cd0fc2803dfd433aca5784a8cf429656ac167c3245cd59601c3e4a335b55c18ce32e03209ff72e

  • SSDEEP

    6144:8sMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:8DPSZrEtPU4Nmn08r2QnjR

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      23944151aeccbf9ddc4bcd620bffc571_JaffaCakes118

    • Size

      261KB

    • MD5

      23944151aeccbf9ddc4bcd620bffc571

    • SHA1

      09ec5f79fa4a7da28a671aa89a26665e6e8ff991

    • SHA256

      1f5c8bef69b72c5b4534c6801964c5751da0fa3cdf4266efaa8c9351a80ed505

    • SHA512

      7cd5cf3be02ad19bf0f6925ee1f41cb480f4c48224ba183512cd0fc2803dfd433aca5784a8cf429656ac167c3245cd59601c3e4a335b55c18ce32e03209ff72e

    • SSDEEP

      6144:8sMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:8DPSZrEtPU4Nmn08r2QnjR

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks