Overview

overview

10

Static

static

7

40d88dd28f...18.exe

windows7-x64

10

40d88dd28f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40d88dd28fb4d5e369962bb3a4e40c31_JaffaCakes118

  • Size

    434KB

  • Sample

    240713-jw6p2svera

  • MD5

    40d88dd28fb4d5e369962bb3a4e40c31

  • SHA1

    8d231fd7cece00b4d323515b27b5a00a24982480

  • SHA256

    3600050705e0d89a9aea80ef3420fae9396fd69fb44b974a9c0f7f73fbeab70f

  • SHA512

    a4b810872d9a57c2c587094c7d457a45989612767b92a722ed4b25839da59af6cbcfb123f5aced2303e1611cae17e5241c87702a9877efdd3323b2c86650e575

  • SSDEEP

    6144:ZPkmB08j8j6FesJ3geDTEgu4gxtDc4GIX8rslIUSgoPkTO6rxsuNbjyUZ39DrVbk:+mBP8jczJpgbDcIQSRpTJbZ1Z7Rq

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      40d88dd28fb4d5e369962bb3a4e40c31_JaffaCakes118

    • Size

      434KB

    • MD5

      40d88dd28fb4d5e369962bb3a4e40c31

    • SHA1

      8d231fd7cece00b4d323515b27b5a00a24982480

    • SHA256

      3600050705e0d89a9aea80ef3420fae9396fd69fb44b974a9c0f7f73fbeab70f

    • SHA512

      a4b810872d9a57c2c587094c7d457a45989612767b92a722ed4b25839da59af6cbcfb123f5aced2303e1611cae17e5241c87702a9877efdd3323b2c86650e575

    • SSDEEP

      6144:ZPkmB08j8j6FesJ3geDTEgu4gxtDc4GIX8rslIUSgoPkTO6rxsuNbjyUZ39DrVbk:+mBP8jczJpgbDcIQSRpTJbZ1Z7Rq

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks