Overview

overview

10

Static

static

3

276000fee9...18.exe

windows7-x64

10

276000fee9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    276000fee9092cad052313a3ab7edd56_JaffaCakes118

  • Size

    403KB

  • Sample

    240706-fzrthswfmq

  • MD5

    276000fee9092cad052313a3ab7edd56

  • SHA1

    99123ea71f0bfce2f6f3a242e5531ff89b891b08

  • SHA256

    5756b9dd9fc93f49b2fabddb5a395f790d6085effff661030f9d70d6aa6e9a0e

  • SHA512

    eaf957c70fe3e691d0c4b689107bb9974932ad53b006ecc7b5afd00d05de5344babfede4012efa30763d67cabc3a3f62cc25eeff85fdd66bd0e185a7542dd1ec

  • SSDEEP

    6144:xYVodqnsjs9Y2jExREdJIw2uqUdYI/tx3pX6Gn2V43OwedG14gA4jc36W+M:xNH8/E6l2uD9t5pKGn13OwUK9m

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      276000fee9092cad052313a3ab7edd56_JaffaCakes118

    • Size

      403KB

    • MD5

      276000fee9092cad052313a3ab7edd56

    • SHA1

      99123ea71f0bfce2f6f3a242e5531ff89b891b08

    • SHA256

      5756b9dd9fc93f49b2fabddb5a395f790d6085effff661030f9d70d6aa6e9a0e

    • SHA512

      eaf957c70fe3e691d0c4b689107bb9974932ad53b006ecc7b5afd00d05de5344babfede4012efa30763d67cabc3a3f62cc25eeff85fdd66bd0e185a7542dd1ec

    • SSDEEP

      6144:xYVodqnsjs9Y2jExREdJIw2uqUdYI/tx3pX6Gn2V43OwedG14gA4jc36W+M:xNH8/E6l2uD9t5pKGn13OwUK9m

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks