Overview

overview

10

Static

static

7

3bcf61f8a3...18.exe

windows7-x64

7

3bcf61f8a3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240712-tvpp9a1dkm

  • MD5

    3bcf61f8a3b5c712fc72214acb2f8b49

  • SHA1

    15924d146a8998780a3aba79c4de1a2c964b7f6f

  • SHA256

    a5c05451c7cfe0d2dc291e6260a28404db0ae9e3a3bc638c7f5ec677c12a3418

  • SHA512

    72ad9a8e562accee0cc5bd9c8298a2433ada4ea05435e02f79edd0c27e67e7c595884965a55622af8fe44394ed2f9ac317a4db15df28a5d4a4722c53244123c8

  • SSDEEP

    24576:F/agfBj0KdLdE7cOTKA47hHT/+GiA2qa+ikjngd8ZAqEbW3RHG2N:F/Pj3CcyKVhz/+i2LMjnI8ZsW0Q

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118

    • Size

      1.5MB

    • MD5

      3bcf61f8a3b5c712fc72214acb2f8b49

    • SHA1

      15924d146a8998780a3aba79c4de1a2c964b7f6f

    • SHA256

      a5c05451c7cfe0d2dc291e6260a28404db0ae9e3a3bc638c7f5ec677c12a3418

    • SHA512

      72ad9a8e562accee0cc5bd9c8298a2433ada4ea05435e02f79edd0c27e67e7c595884965a55622af8fe44394ed2f9ac317a4db15df28a5d4a4722c53244123c8

    • SSDEEP

      24576:F/agfBj0KdLdE7cOTKA47hHT/+GiA2qa+ikjngd8ZAqEbW3RHG2N:F/Pj3CcyKVhz/+i2LMjnI8ZsW0Q

    Score
    10/10
    upxpersistence

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks