General

  • Target

    2ad90eb5c25cff5533eefbabd75a0ced_JaffaCakes118

  • Size

    31KB

  • Sample

    240708-d557zs1akl

  • MD5

    2ad90eb5c25cff5533eefbabd75a0ced

  • SHA1

    06263ba435b3af9a86a8b2bfe8b6f34a0668a3dd

  • SHA256

    f1125a96bfaf5593315ab70d94458fdae936882f83a30b9b0b48a0a4d1c2984e

  • SHA512

    fbafba1678dc090f6e27ebdb776197d5e8fbf015234d40b137d167fffc234e181148180ed1b55c8e8eec611b800ab25f408fb0417a190a84d2fbe01c97f48953

  • SSDEEP

    768:Rx1c2kbCkcXcsYK5/dQI+0MahTVLAxsCBiWXwV8+Wh/Z37:RGukc/YM/db+DahRLCBiWV+WPr

Score
10/10

Malware Config

Targets

    • Target

      2ad90eb5c25cff5533eefbabd75a0ced_JaffaCakes118

    • Size

      31KB

    • MD5

      2ad90eb5c25cff5533eefbabd75a0ced

    • SHA1

      06263ba435b3af9a86a8b2bfe8b6f34a0668a3dd

    • SHA256

      f1125a96bfaf5593315ab70d94458fdae936882f83a30b9b0b48a0a4d1c2984e

    • SHA512

      fbafba1678dc090f6e27ebdb776197d5e8fbf015234d40b137d167fffc234e181148180ed1b55c8e8eec611b800ab25f408fb0417a190a84d2fbe01c97f48953

    • SSDEEP

      768:Rx1c2kbCkcXcsYK5/dQI+0MahTVLAxsCBiWXwV8+Wh/Z37:RGukc/YM/db+DahRLCBiWV+WPr

    Score
    10/10
    • Modifies WinLogon for persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks