Overview

overview

10

Static

static

3

29dd3e6617...18.exe

windows7-x64

10

29dd3e6617...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29dd3e66171031e3c8c770db8d3f9415_JaffaCakes118

  • Size

    380KB

  • Sample

    240707-kncyfaxhmj

  • MD5

    29dd3e66171031e3c8c770db8d3f9415

  • SHA1

    cb8944854c1beb9f5cfa9aeffbb910c436201776

  • SHA256

    d844b060afe3c2aff884c1ac3178a6a7ed03478d6be641c54efc6cd5957c3d53

  • SHA512

    a0ab5294a10b5369e4f36c107086121c3080ca539b2f93c322f8c806dd6dc59183e8b99e0eb45e8fa549bfc2f69d14551f50ffa45b79706c760850e6ea6481d4

  • SSDEEP

    6144:ZBPu1qF2idZecnl20lHRxp3gclk9ihl0/srEQpPK+e1FtEuxF+U2/kU:61mF3Z4mxxPoEtlK+kt9T2MU

Score
10/10
persistence

Malware Config

Targets

    • Target

      29dd3e66171031e3c8c770db8d3f9415_JaffaCakes118

    • Size

      380KB

    • MD5

      29dd3e66171031e3c8c770db8d3f9415

    • SHA1

      cb8944854c1beb9f5cfa9aeffbb910c436201776

    • SHA256

      d844b060afe3c2aff884c1ac3178a6a7ed03478d6be641c54efc6cd5957c3d53

    • SHA512

      a0ab5294a10b5369e4f36c107086121c3080ca539b2f93c322f8c806dd6dc59183e8b99e0eb45e8fa549bfc2f69d14551f50ffa45b79706c760850e6ea6481d4

    • SSDEEP

      6144:ZBPu1qF2idZecnl20lHRxp3gclk9ihl0/srEQpPK+e1FtEuxF+U2/kU:61mF3Z4mxxPoEtlK+kt9T2MU

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks