Overview

overview

7

Static

static

7

59d4be8872...18.dll

windows7-x64

1

59d4be8872...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59d4be88720c710e27a1991ef118264d_JaffaCakes118

  • Size

    36KB

  • Sample

    240719-bdl9pavgmr

  • MD5

    59d4be88720c710e27a1991ef118264d

  • SHA1

    f24ad854f3077fed37de12d683c408de04186164

  • SHA256

    c5890bff2484bccc6f3d2a836947e30483a7e3ebb359da5febdb74704f0eb54f

  • SHA512

    f81d00496dd24cf225d1d1c837f044482a9e40daa41065ec8d660475db190c38d25d07538462a57a1f6a143ec817de74ee4d92e3d9d1f64aa8d24b6ef0e43f3c

  • SSDEEP

    768:rslCipO5S/UodhS8Znx7V7LnsJ3xD0NDa0U4f6JQKc7LlbxpVsrT1F+:rswMWO7VvsJhDH4mFYpCrx

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      59d4be88720c710e27a1991ef118264d_JaffaCakes118

    • Size

      36KB

    • MD5

      59d4be88720c710e27a1991ef118264d

    • SHA1

      f24ad854f3077fed37de12d683c408de04186164

    • SHA256

      c5890bff2484bccc6f3d2a836947e30483a7e3ebb359da5febdb74704f0eb54f

    • SHA512

      f81d00496dd24cf225d1d1c837f044482a9e40daa41065ec8d660475db190c38d25d07538462a57a1f6a143ec817de74ee4d92e3d9d1f64aa8d24b6ef0e43f3c

    • SSDEEP

      768:rslCipO5S/UodhS8Znx7V7LnsJ3xD0NDa0U4f6JQKc7LlbxpVsrT1F+:rswMWO7VvsJhDH4mFYpCrx

    Score
    7/10
    persistenceupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks