Overview

overview

10

Static

static

7

2aa5c1ca01...18.exe

windows7-x64

10

2aa5c1ca01...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2aa5c1ca0135960d35cf8330bbe1ba7a_JaffaCakes118

  • Size

    12KB

  • Sample

    240708-csf7naxgqk

  • MD5

    2aa5c1ca0135960d35cf8330bbe1ba7a

  • SHA1

    ac514a6e6f21a0040fb686737965164ea21b7197

  • SHA256

    4ad416e66c77031ab1b377aceff7702347ff407ca419f1b58f2940f386bf67a8

  • SHA512

    937237a30393fbb7303b48837cdd3e0c7e22e5c6dffe0fc88daea817d148ebb8f782cb1ffb7556206cb08ce8db58faa5432d6b90f64080de7dd72f23d3bb0651

  • SSDEEP

    192:FMjg9JLeV+BIceIf761dgbDKzfV3FGcFQZLPbRsSiStVI7S2eFdOf:FMj4hrf76IbuOcGNmSikIT6y

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      2aa5c1ca0135960d35cf8330bbe1ba7a_JaffaCakes118

    • Size

      12KB

    • MD5

      2aa5c1ca0135960d35cf8330bbe1ba7a

    • SHA1

      ac514a6e6f21a0040fb686737965164ea21b7197

    • SHA256

      4ad416e66c77031ab1b377aceff7702347ff407ca419f1b58f2940f386bf67a8

    • SHA512

      937237a30393fbb7303b48837cdd3e0c7e22e5c6dffe0fc88daea817d148ebb8f782cb1ffb7556206cb08ce8db58faa5432d6b90f64080de7dd72f23d3bb0651

    • SSDEEP

      192:FMjg9JLeV+BIceIf761dgbDKzfV3FGcFQZLPbRsSiStVI7S2eFdOf:FMj4hrf76IbuOcGNmSikIT6y

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks