Overview

overview

10

Static

static

3

29ace5c481...18.exe

windows7-x64

10

29ace5c481...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29ace5c481ed79d1f9a60cb59c6fb4b2_JaffaCakes118

  • Size

    276KB

  • Sample

    240707-cyzaes1flq

  • MD5

    29ace5c481ed79d1f9a60cb59c6fb4b2

  • SHA1

    c7ff715dd8a843c6786239bb4a2d37264053b327

  • SHA256

    75a228cd997fc52d226be55e4f6e04febd8518c80307f2b88002eb6b7ab10537

  • SHA512

    0c6b900b61d053e036b0f4b6199eaaa23d6f2606d369bd364c6b5e89dcfaeeb68cc8c4814776c9ab6308da32ccc8aa8b68aa7d630877f7b797d580a66a676a8f

  • SSDEEP

    6144:pcD08VhiUJw46Xjhbg6xDyv2GALijX1Na/HZuk:pcD08VwUJ76Xjh0sFXiJk

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      29ace5c481ed79d1f9a60cb59c6fb4b2_JaffaCakes118

    • Size

      276KB

    • MD5

      29ace5c481ed79d1f9a60cb59c6fb4b2

    • SHA1

      c7ff715dd8a843c6786239bb4a2d37264053b327

    • SHA256

      75a228cd997fc52d226be55e4f6e04febd8518c80307f2b88002eb6b7ab10537

    • SHA512

      0c6b900b61d053e036b0f4b6199eaaa23d6f2606d369bd364c6b5e89dcfaeeb68cc8c4814776c9ab6308da32ccc8aa8b68aa7d630877f7b797d580a66a676a8f

    • SSDEEP

      6144:pcD08VhiUJw46Xjhbg6xDyv2GALijX1Na/HZuk:pcD08VwUJ76Xjh0sFXiJk

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks