Overview

overview

10

Static

static

3

b821da5d7a...18.exe

windows7-x64

10

b821da5d7a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b821da5d7ae1c47f0bbbecb176c461a9_JaffaCakes118

  • Size

    132KB

  • Sample

    240822-snzq7stfkf

  • MD5

    b821da5d7ae1c47f0bbbecb176c461a9

  • SHA1

    1bac86a722d1d62223f69c41a021b29f8db50523

  • SHA256

    f3a7066136baba492696cc4de356d84122619be843eb031a47ecd3178c23fd86

  • SHA512

    0f460cb465f49ea532ddb12c13ee3c9e80569ae19f30e45f4e460711a93bdaaaa7aed285dbb5cbe34738b14420eb4e4fa468a4848c6a1555dc18d9743e8c2a8d

  • SSDEEP

    1536:s11f28awErDA48RfYICXBfuvS6bgAWJZFxLoeb8VLxnSc6x1sOspq1ava2:s11f28awLrRf7CUcLJZFpcxnSvsOz+r

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      b821da5d7ae1c47f0bbbecb176c461a9_JaffaCakes118

    • Size

      132KB

    • MD5

      b821da5d7ae1c47f0bbbecb176c461a9

    • SHA1

      1bac86a722d1d62223f69c41a021b29f8db50523

    • SHA256

      f3a7066136baba492696cc4de356d84122619be843eb031a47ecd3178c23fd86

    • SHA512

      0f460cb465f49ea532ddb12c13ee3c9e80569ae19f30e45f4e460711a93bdaaaa7aed285dbb5cbe34738b14420eb4e4fa468a4848c6a1555dc18d9743e8c2a8d

    • SSDEEP

      1536:s11f28awErDA48RfYICXBfuvS6bgAWJZFxLoeb8VLxnSc6x1sOspq1ava2:s11f28awLrRf7CUcLJZFpcxnSvsOz+r

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks