Overview

overview

10

Static

static

7

d3e517e198...18.exe

windows7-x64

10

d3e517e198...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3e517e198379ed5b8faf580bef47961_JaffaCakes118

  • Size

    248KB

  • Sample

    240908-jtl8maxakd

  • MD5

    d3e517e198379ed5b8faf580bef47961

  • SHA1

    5daf25a32e1a3f8dbbf14d488487c0175d266d60

  • SHA256

    c28384feb8d622682c10e81da44448c226638a7fed9b531ab7a5f652c55b3e1a

  • SHA512

    3902b8f850c5d1242840f7c61d38b677a7d98356097c939dd2f06ed9d18f1391784775ca213b1d3cf5a1e661f2d79a14f250bbfb8202124646ac89e451b0d162

  • SSDEEP

    6144:5Qscj0zoT9nfNARb+m4hOZTIpZh3usSoSVGM:yQzoT9fNAcmeV4xoS

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      d3e517e198379ed5b8faf580bef47961_JaffaCakes118

    • Size

      248KB

    • MD5

      d3e517e198379ed5b8faf580bef47961

    • SHA1

      5daf25a32e1a3f8dbbf14d488487c0175d266d60

    • SHA256

      c28384feb8d622682c10e81da44448c226638a7fed9b531ab7a5f652c55b3e1a

    • SHA512

      3902b8f850c5d1242840f7c61d38b677a7d98356097c939dd2f06ed9d18f1391784775ca213b1d3cf5a1e661f2d79a14f250bbfb8202124646ac89e451b0d162

    • SSDEEP

      6144:5Qscj0zoT9nfNARb+m4hOZTIpZh3usSoSVGM:yQzoT9fNAcmeV4xoS

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks