Overview

overview

10

Static

static

3

6f87a6f59c...18.exe

windows7-x64

10

6f87a6f59c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f87a6f59c68fb66b04b62606d045535_JaffaCakes118

  • Size

    42KB

  • Sample

    240725-pe1qcs1dnc

  • MD5

    6f87a6f59c68fb66b04b62606d045535

  • SHA1

    595e29b10b5bfb07a3c3892cdb3fb1e4cd07981f

  • SHA256

    4a5b2feb9cc9ee1472f23aefb28cd8f6f817ef101f512211d915ec7a7289f9e7

  • SHA512

    82a404653180b1b1f9c25942cabacc4cfee1ce104d2e9d2afe91cf77cc3c30510fd9e338a3f7ae66c26dac8273ddc144ba2c2d9aab6ee007de9f6d646faef389

  • SSDEEP

    768:lv+RqD1szIWxttMOxHuYJm89vM99d1WOIZK+luoYjZ0bh8sYve5i4BI:8RqD1s8WxttMWOkM3d1WOIBujjMEG59

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      6f87a6f59c68fb66b04b62606d045535_JaffaCakes118

    • Size

      42KB

    • MD5

      6f87a6f59c68fb66b04b62606d045535

    • SHA1

      595e29b10b5bfb07a3c3892cdb3fb1e4cd07981f

    • SHA256

      4a5b2feb9cc9ee1472f23aefb28cd8f6f817ef101f512211d915ec7a7289f9e7

    • SHA512

      82a404653180b1b1f9c25942cabacc4cfee1ce104d2e9d2afe91cf77cc3c30510fd9e338a3f7ae66c26dac8273ddc144ba2c2d9aab6ee007de9f6d646faef389

    • SSDEEP

      768:lv+RqD1szIWxttMOxHuYJm89vM99d1WOIZK+luoYjZ0bh8sYve5i4BI:8RqD1s8WxttMWOkM3d1WOIBujjMEG59

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks