Overview

overview

10

Static

static

3

6469fdd088...18.exe

windows7-x64

10

6469fdd088...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6469fdd0886a5487eb6aec3ee3d8c178_JaffaCakes118

  • Size

    257KB

  • Sample

    240722-xqpfgasfpf

  • MD5

    6469fdd0886a5487eb6aec3ee3d8c178

  • SHA1

    b36a57817ed9d5f7c93f1a7a0ff0cdf3f36ba28e

  • SHA256

    ba5c0d263878e13c9204c19781182e94efb9038b89421cddb8445bdf9cf0dc1f

  • SHA512

    8d72c67d13373674992e2d4b1de1646b7c75e4a837662b15ad6da577599395d5bcc767c49c5d22d56fcabff9175662b4fba79b9428e2df9e6a6a4a164142ec71

  • SSDEEP

    3072:bicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:qXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      6469fdd0886a5487eb6aec3ee3d8c178_JaffaCakes118

    • Size

      257KB

    • MD5

      6469fdd0886a5487eb6aec3ee3d8c178

    • SHA1

      b36a57817ed9d5f7c93f1a7a0ff0cdf3f36ba28e

    • SHA256

      ba5c0d263878e13c9204c19781182e94efb9038b89421cddb8445bdf9cf0dc1f

    • SHA512

      8d72c67d13373674992e2d4b1de1646b7c75e4a837662b15ad6da577599395d5bcc767c49c5d22d56fcabff9175662b4fba79b9428e2df9e6a6a4a164142ec71

    • SSDEEP

      3072:bicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:qXNNSo2EscAxmpDGIhtrTpUpH15WJS3

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks