Overview

overview

10

Static

static

3

36e9d21b9e...18.exe

windows7-x64

10

36e9d21b9e...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    36e9d21b9ecf67e2e6d9f3f259c3c85f_JaffaCakes118

  • Size

    359KB

  • Sample

    240710-3yvv4sxclj

  • MD5

    36e9d21b9ecf67e2e6d9f3f259c3c85f

  • SHA1

    6f48b58807df71f50957d373b85f6eabf0fc5c90

  • SHA256

    3d1ade2456b99cb1573710d7a2d57775536d0e7b80fb4cf47f34dcf31e125724

  • SHA512

    8575410c9b1576de38cac1b8de1ab36f9989fe706fccb547ba8a0f6ab6a4b7a7fe239a7410a7beff45b067aab0dafe02ed70de58301fce070e44d58da7dd8a9e

  • SSDEEP

    6144:QAVBXtruW8//rKC/Mz1C3sSTnvziJ+XV9Rgh3rKkg7rULU17:QATXBuVszcbiMXZgh7KxQL

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      36e9d21b9ecf67e2e6d9f3f259c3c85f_JaffaCakes118

    • Size

      359KB

    • MD5

      36e9d21b9ecf67e2e6d9f3f259c3c85f

    • SHA1

      6f48b58807df71f50957d373b85f6eabf0fc5c90

    • SHA256

      3d1ade2456b99cb1573710d7a2d57775536d0e7b80fb4cf47f34dcf31e125724

    • SHA512

      8575410c9b1576de38cac1b8de1ab36f9989fe706fccb547ba8a0f6ab6a4b7a7fe239a7410a7beff45b067aab0dafe02ed70de58301fce070e44d58da7dd8a9e

    • SSDEEP

      6144:QAVBXtruW8//rKC/Mz1C3sSTnvziJ+XV9Rgh3rKkg7rULU17:QATXBuVszcbiMXZgh7KxQL

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks