Overview

overview

10

Static

static

3

709b948a2c...18.exe

windows7-x64

3

709b948a2c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    709b948a2cc22050974be20acd505176_JaffaCakes118

  • Size

    96KB

  • Sample

    240725-wbrfvaxhqb

  • MD5

    709b948a2cc22050974be20acd505176

  • SHA1

    b7cce7c5e6f15994cf93c25a43922ef76a1d8c18

  • SHA256

    ae01e8c98906ad45afa81c87ad1744aafadfee6cbe94a16871e065c9c02e02d6

  • SHA512

    cafd2372cb68745d179e1d5753ca67e5c2edc488d82d9e4ce52d0d74c7822ee08fce8863420b53ee61ccbe19d583ed7626cc011fcb6b879e3015af9a1730b627

  • SSDEEP

    3072:MGzH7P+LZY+g7S53TTe0Z5o/0lK+VDitUzE:9TaFHg7A3ex/0tiUY

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      709b948a2cc22050974be20acd505176_JaffaCakes118

    • Size

      96KB

    • MD5

      709b948a2cc22050974be20acd505176

    • SHA1

      b7cce7c5e6f15994cf93c25a43922ef76a1d8c18

    • SHA256

      ae01e8c98906ad45afa81c87ad1744aafadfee6cbe94a16871e065c9c02e02d6

    • SHA512

      cafd2372cb68745d179e1d5753ca67e5c2edc488d82d9e4ce52d0d74c7822ee08fce8863420b53ee61ccbe19d583ed7626cc011fcb6b879e3015af9a1730b627

    • SSDEEP

      3072:MGzH7P+LZY+g7S53TTe0Z5o/0lK+VDitUzE:9TaFHg7A3ex/0tiUY

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks