Overview

overview

10

Static

static

3

dd08ad31bf...18.exe

windows7-x64

10

dd08ad31bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd08ad31bf5e7289d1f96858b40f72ca_JaffaCakes118

  • Size

    4.1MB

  • Sample

    240912-zqj7vstgpn

  • MD5

    dd08ad31bf5e7289d1f96858b40f72ca

  • SHA1

    594c1ec59acda12e21531801999dc027b82bd824

  • SHA256

    71ccd45d09f55506123aef9db6a90ce2cbfb3dc73cabd29722d8dfad740a3f11

  • SHA512

    6e4b04c3596a9d6a4b36f12ebf669cb70c975d023e56100853e5a0ca42b7a0f287e5e655dc2db7a9b752fb2f2638dd1c7f99991bc0e4b8b349acab88d8bd4b3d

  • SSDEEP

    49152:VyDOaFSuPTxdgAWOVazEnKX5JWgiOdBocBh+YJlqAqdx:VyDHxfW4yBOsdxi

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      dd08ad31bf5e7289d1f96858b40f72ca_JaffaCakes118

    • Size

      4.1MB

    • MD5

      dd08ad31bf5e7289d1f96858b40f72ca

    • SHA1

      594c1ec59acda12e21531801999dc027b82bd824

    • SHA256

      71ccd45d09f55506123aef9db6a90ce2cbfb3dc73cabd29722d8dfad740a3f11

    • SHA512

      6e4b04c3596a9d6a4b36f12ebf669cb70c975d023e56100853e5a0ca42b7a0f287e5e655dc2db7a9b752fb2f2638dd1c7f99991bc0e4b8b349acab88d8bd4b3d

    • SSDEEP

      49152:VyDOaFSuPTxdgAWOVazEnKX5JWgiOdBocBh+YJlqAqdx:VyDHxfW4yBOsdxi

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks