Overview

overview

10

Static

static

7

8b61b1da25...18.exe

windows7-x64

10

8b61b1da25...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b61b1da253b14166929c41be4238da2_JaffaCakes118

  • Size

    282KB

  • Sample

    240811-whz2kavcpb

  • MD5

    8b61b1da253b14166929c41be4238da2

  • SHA1

    db7c7fa8d34e81337ac718688aa7bdb07fbcb394

  • SHA256

    4deba076d369dc97f48cd74583a9e7803bb83e766f027bb82a49be57cded0ff3

  • SHA512

    772c78c575a491b14bbcbec4db57621a769cca7f52ee68f3ea5549f0d5bb1debb69f0ee9c1ed3aaabfc703bd355b5dcea907d7150334d6420a2e61a35976363d

  • SSDEEP

    6144:dZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:nFTxWYMh5qoLb8LCy9E

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      8b61b1da253b14166929c41be4238da2_JaffaCakes118

    • Size

      282KB

    • MD5

      8b61b1da253b14166929c41be4238da2

    • SHA1

      db7c7fa8d34e81337ac718688aa7bdb07fbcb394

    • SHA256

      4deba076d369dc97f48cd74583a9e7803bb83e766f027bb82a49be57cded0ff3

    • SHA512

      772c78c575a491b14bbcbec4db57621a769cca7f52ee68f3ea5549f0d5bb1debb69f0ee9c1ed3aaabfc703bd355b5dcea907d7150334d6420a2e61a35976363d

    • SSDEEP

      6144:dZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:nFTxWYMh5qoLb8LCy9E

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks