Overview

overview

10

Static

static

7

3ec5119848...18.exe

windows7-x64

3ec5119848...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ec51198488cda0e02ffe52d1c5e0f61_JaffaCakes118

  • Size

    640KB

  • Sample

    240712-y8xega1emh

  • MD5

    3ec51198488cda0e02ffe52d1c5e0f61

  • SHA1

    bd6d7728e58f8ac2ceddba0adf7e73e79161a6c9

  • SHA256

    eacac9e0eda3ea4e6bde7ae19dc6558bf9adf271bffdfe053bc900f141e0790b

  • SHA512

    5477499712a0cc28123704884bfdebf14ab147ccc628db208d7e1432c17a89faa16e04916ef02b79b0fed81143cded1c6f97a14f5be22f2d1690025ab55900af

  • SSDEEP

    12288:qOQW2ej0MFqA+vxAQaJwHvZ2uQxEA8t0PpQ0vb5iUUhbJ2jf55k2tWl1s46n:NQWbjbFqA0AlwHh2D++jjsUUhQjfs22

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      3ec51198488cda0e02ffe52d1c5e0f61_JaffaCakes118

    • Size

      640KB

    • MD5

      3ec51198488cda0e02ffe52d1c5e0f61

    • SHA1

      bd6d7728e58f8ac2ceddba0adf7e73e79161a6c9

    • SHA256

      eacac9e0eda3ea4e6bde7ae19dc6558bf9adf271bffdfe053bc900f141e0790b

    • SHA512

      5477499712a0cc28123704884bfdebf14ab147ccc628db208d7e1432c17a89faa16e04916ef02b79b0fed81143cded1c6f97a14f5be22f2d1690025ab55900af

    • SSDEEP

      12288:qOQW2ej0MFqA+vxAQaJwHvZ2uQxEA8t0PpQ0vb5iUUhbJ2jf55k2tWl1s46n:NQWbjbFqA0AlwHh2D++jjsUUhQjfs22

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks