Overview

overview

10

Static

static

3

eafef61014...18.exe

windows7-x64

10

eafef61014...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eafef610148d9f61233eeb9bb0736f5f_JaffaCakes118

  • Size

    576KB

  • Sample

    240919-kyvaga1djj

  • MD5

    eafef610148d9f61233eeb9bb0736f5f

  • SHA1

    39c3e87414a407911b73b222546133fa58d54d16

  • SHA256

    f7975bc0c0fa4c0765eff0dccc88e756abb186eed23bfa7f5ee67c731e7f4a8f

  • SHA512

    1f5d5ba65181ed0fc0f7906d173cb1159f0b74072ab1bb5e624a905ce799339b46f070c23c42b04c342fd3a5e90b9251891b7f7b8f186f1e80e8b8c7866aae9e

  • SSDEEP

    12288:QCkc/Xwu/sro3X5Azmgh1R3/n0aRz6mHG:QRc/wu/p3X5emghH/0wzdH

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      eafef610148d9f61233eeb9bb0736f5f_JaffaCakes118

    • Size

      576KB

    • MD5

      eafef610148d9f61233eeb9bb0736f5f

    • SHA1

      39c3e87414a407911b73b222546133fa58d54d16

    • SHA256

      f7975bc0c0fa4c0765eff0dccc88e756abb186eed23bfa7f5ee67c731e7f4a8f

    • SHA512

      1f5d5ba65181ed0fc0f7906d173cb1159f0b74072ab1bb5e624a905ce799339b46f070c23c42b04c342fd3a5e90b9251891b7f7b8f186f1e80e8b8c7866aae9e

    • SSDEEP

      12288:QCkc/Xwu/sro3X5Azmgh1R3/n0aRz6mHG:QRc/wu/p3X5emghH/0wzdH

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks