Overview

overview

7

Static

static

3

5e52d79b58...18.exe

windows7-x64

7

5e52d79b58...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e52d79b5844b9b0088e71ed5ffe8aa9_JaffaCakes118

  • Size

    99KB

  • Sample

    240720-arzlhaxgqr

  • MD5

    5e52d79b5844b9b0088e71ed5ffe8aa9

  • SHA1

    6d969f6e26d24be82ac337ea951719e4c74b13c4

  • SHA256

    f34169c4b7064b7a0833bfe8a828b181dad5181d631996c292dee38a4d870af9

  • SHA512

    631d17bc61bab44aec8c9cef1469837795dc8119120cee925e924c27e77d0d4e617c303e2447e8c715a4bb94f7ea3c2f15207e06e3705258b1efd09739110768

  • SSDEEP

    3072:GxhWJV+Cef5aUlDNxLWrVfFPMoUtMNfX:GBCM5aUTaPMotf

Score
7/10
persistence

Malware Config

Targets

    • Target

      5e52d79b5844b9b0088e71ed5ffe8aa9_JaffaCakes118

    • Size

      99KB

    • MD5

      5e52d79b5844b9b0088e71ed5ffe8aa9

    • SHA1

      6d969f6e26d24be82ac337ea951719e4c74b13c4

    • SHA256

      f34169c4b7064b7a0833bfe8a828b181dad5181d631996c292dee38a4d870af9

    • SHA512

      631d17bc61bab44aec8c9cef1469837795dc8119120cee925e924c27e77d0d4e617c303e2447e8c715a4bb94f7ea3c2f15207e06e3705258b1efd09739110768

    • SSDEEP

      3072:GxhWJV+Cef5aUlDNxLWrVfFPMoUtMNfX:GBCM5aUTaPMotf

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks