Overview

overview

10

Static

static

3

5ee70fd906...18.exe

windows7-x64

10

5ee70fd906...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ee70fd906cb796addcc554fe643702c_JaffaCakes118

  • Size

    361KB

  • Sample

    240720-d9zwrsvcqk

  • MD5

    5ee70fd906cb796addcc554fe643702c

  • SHA1

    6f5cc85ceb2c313e913a0242d38dd172ef0638b8

  • SHA256

    5ebf70aa45696e2a031b98c7bbcc9c617c9789dd8efb4db19c42e3f6e6e64112

  • SHA512

    4a0fb97036ced2943309a97b05e181687c5407507055cc117ccb2084048b702bff9814c92e90627826db017b214a9c3f2d942400e020b7bcb0cbbc15aae95e5f

  • SSDEEP

    6144:kY9UIr+OXOBaU7iGYiJkaV2OFbC4XEqPTY/U1GvbYG+XtLETkzmo:kY9UZxgU7iGYiJkaC2fPTY/U8vbYj54O

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      5ee70fd906cb796addcc554fe643702c_JaffaCakes118

    • Size

      361KB

    • MD5

      5ee70fd906cb796addcc554fe643702c

    • SHA1

      6f5cc85ceb2c313e913a0242d38dd172ef0638b8

    • SHA256

      5ebf70aa45696e2a031b98c7bbcc9c617c9789dd8efb4db19c42e3f6e6e64112

    • SHA512

      4a0fb97036ced2943309a97b05e181687c5407507055cc117ccb2084048b702bff9814c92e90627826db017b214a9c3f2d942400e020b7bcb0cbbc15aae95e5f

    • SSDEEP

      6144:kY9UIr+OXOBaU7iGYiJkaV2OFbC4XEqPTY/U1GvbYG+XtLETkzmo:kY9UZxgU7iGYiJkaC2fPTY/U8vbYj54O

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks