Overview

overview

7

Static

static

3

2d4a7f51ce...18.exe

windows7-x64

7

2d4a7f51ce...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d4a7f51cef2ebff91147914161323fb_JaffaCakes118

  • Size

    52KB

  • Sample

    240708-wh5l2stdpd

  • MD5

    2d4a7f51cef2ebff91147914161323fb

  • SHA1

    d32d375076c433fd348f115e7a88799fce0149d5

  • SHA256

    c4fd60eb1565da4bd447123dc7b571de07d90becf5c9c5356ea0cf97bd11f533

  • SHA512

    c66dcfc578770703abb71ad2366d0800f29369ba49b9db11d760fa7538ba4a1e356c7dfd22d3f8b4291e14497dacea2966001c90fe40e10da67d3d442ae8f9b4

  • SSDEEP

    1536:jJGYo4JavpdudX5xVKP3hGnAetq+wkfFjSu/o3WECNFyL:IEJCCX5HKfaj5fNwWtPQ

Score
7/10
defense_evasionpersistence

Malware Config

Targets

    • Target

      2d4a7f51cef2ebff91147914161323fb_JaffaCakes118

    • Size

      52KB

    • MD5

      2d4a7f51cef2ebff91147914161323fb

    • SHA1

      d32d375076c433fd348f115e7a88799fce0149d5

    • SHA256

      c4fd60eb1565da4bd447123dc7b571de07d90becf5c9c5356ea0cf97bd11f533

    • SHA512

      c66dcfc578770703abb71ad2366d0800f29369ba49b9db11d760fa7538ba4a1e356c7dfd22d3f8b4291e14497dacea2966001c90fe40e10da67d3d442ae8f9b4

    • SSDEEP

      1536:jJGYo4JavpdudX5xVKP3hGnAetq+wkfFjSu/o3WECNFyL:IEJCCX5HKfaj5fNwWtPQ

    Score
    7/10
    defense_evasionpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Impair Defenses: Safe Mode Boot

      defense_evasion

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks