Overview

overview

10

Static

static

7

eb7c1dedaf...18.exe

windows7-x64

10

eb7c1dedaf...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb7c1dedaf73798d1b3e30a412c386c9_JaffaCakes118

  • Size

    211KB

  • Sample

    240919-rb57sasfrj

  • MD5

    eb7c1dedaf73798d1b3e30a412c386c9

  • SHA1

    1296803f821d631882a6687efc56eb3188da8c44

  • SHA256

    dab001e782a25e2f0046e11c5f9dda236ffa137239b8f05d5bb1d754ed9ba8db

  • SHA512

    3158e095e9838f331bbdf5a47517a92f92b41b38de9ac81b6726e4d5515407076e5b46c29717dbb55e704107b9f3877d3b55830e9ce899b4d10b4e8162fcbbe0

  • SSDEEP

    6144:WAnQ0LUbEUX5b6Nuczjp9gOnlFmL76kzezoS:p7U9cBlQn6iezoS

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      eb7c1dedaf73798d1b3e30a412c386c9_JaffaCakes118

    • Size

      211KB

    • MD5

      eb7c1dedaf73798d1b3e30a412c386c9

    • SHA1

      1296803f821d631882a6687efc56eb3188da8c44

    • SHA256

      dab001e782a25e2f0046e11c5f9dda236ffa137239b8f05d5bb1d754ed9ba8db

    • SHA512

      3158e095e9838f331bbdf5a47517a92f92b41b38de9ac81b6726e4d5515407076e5b46c29717dbb55e704107b9f3877d3b55830e9ce899b4d10b4e8162fcbbe0

    • SSDEEP

      6144:WAnQ0LUbEUX5b6Nuczjp9gOnlFmL76kzezoS:p7U9cBlQn6iezoS

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks