Overview

overview

10

Static

static

3

b705d245e6...18.exe

windows7-x64

10

b705d245e6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b705d245e65cd1cd306e4dfd895896da_JaffaCakes118

  • Size

    161KB

  • Sample

    240822-kpy73axfma

  • MD5

    b705d245e65cd1cd306e4dfd895896da

  • SHA1

    f8c6806629ab14b3bc5c2704b13cf55550139aa9

  • SHA256

    e72b8cfd4e968e4b5f72ce3a17b1048e9364ce2bed852404936d41aac81dfac9

  • SHA512

    73e37158147fcff8ba92c7e30d7dc674600bc97485bb5c9da649ff8eed8ebcdfa1b2edcc522cdd4b2fd5cbe758e7de227f7d6b72d75ca1d961066e30118c6a67

  • SSDEEP

    3072:d65S6dOYuBYzqz5xmLsN59k4C5xFxuFlgs76MpI7C8jH8wr8KXrtd0aT:U8fYrq9xZkVGfN6AI71c4XLtT

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      b705d245e65cd1cd306e4dfd895896da_JaffaCakes118

    • Size

      161KB

    • MD5

      b705d245e65cd1cd306e4dfd895896da

    • SHA1

      f8c6806629ab14b3bc5c2704b13cf55550139aa9

    • SHA256

      e72b8cfd4e968e4b5f72ce3a17b1048e9364ce2bed852404936d41aac81dfac9

    • SHA512

      73e37158147fcff8ba92c7e30d7dc674600bc97485bb5c9da649ff8eed8ebcdfa1b2edcc522cdd4b2fd5cbe758e7de227f7d6b72d75ca1d961066e30118c6a67

    • SSDEEP

      3072:d65S6dOYuBYzqz5xmLsN59k4C5xFxuFlgs76MpI7C8jH8wr8KXrtd0aT:U8fYrq9xZkVGfN6AI71c4XLtT

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks