Overview

overview

10

Static

static

7

3cea112008...18.exe

windows7-x64

10

3cea112008...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3cea112008870b0f75a3e707281ca483_JaffaCakes118

  • Size

    242KB

  • Sample

    240712-lz7sma1arf

  • MD5

    3cea112008870b0f75a3e707281ca483

  • SHA1

    3119927821ea72c74022b5b4d8d749bdeb467bfa

  • SHA256

    d041a11a04bba9142ee44712a53c8e94bccefeefe1d382ac35171518cd6b64a7

  • SHA512

    e0c187c0acf772b4808eabdc792e2d4598ec206ffd76df3b04d6e4aa2f263aa39b6ff19fafb81499685c16cde7e5b8e1f15858e1f99cbf292bb20145e8fb7ff1

  • SSDEEP

    6144:fkY8lsGOLp9DJKnDNdVRQnTDwd7x/t8mRaYESWPXgLgadXoSAj:LUsG+3JYbnQnTDwfVFsuWPEgkoSO

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      3cea112008870b0f75a3e707281ca483_JaffaCakes118

    • Size

      242KB

    • MD5

      3cea112008870b0f75a3e707281ca483

    • SHA1

      3119927821ea72c74022b5b4d8d749bdeb467bfa

    • SHA256

      d041a11a04bba9142ee44712a53c8e94bccefeefe1d382ac35171518cd6b64a7

    • SHA512

      e0c187c0acf772b4808eabdc792e2d4598ec206ffd76df3b04d6e4aa2f263aa39b6ff19fafb81499685c16cde7e5b8e1f15858e1f99cbf292bb20145e8fb7ff1

    • SSDEEP

      6144:fkY8lsGOLp9DJKnDNdVRQnTDwd7x/t8mRaYESWPXgLgadXoSAj:LUsG+3JYbnQnTDwfVFsuWPEgkoSO

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks