Overview

overview

10

Static

static

3

ecbc9c6ceb...18.exe

windows7-x64

10

ecbc9c6ceb...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecbc9c6cebd58ca9a21792846bf4f886_JaffaCakes118

  • Size

    3.0MB

  • Sample

    240920-ds1rqswenr

  • MD5

    ecbc9c6cebd58ca9a21792846bf4f886

  • SHA1

    12b855e89619bcadf70eace38d1f62f0cb5c7c6f

  • SHA256

    4486879eeb3eb9b6775880f3dc6bb64a316ce86b4e72d565b4e65754d78fd836

  • SHA512

    acd1fb107070e22c8aa1fd91c05833d98dca2d91ef982007781205d512e6230f18daa7b5ec519b8d5d3d9d31006654db56f047f76fe53951d33ab0c8163a7281

  • SSDEEP

    49152:Xc8zmhQljsBQqJr3gZtSFoD37YyAMud8uurGamG:Xc8zr2ONZtioD37YyAMuZuiG

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ecbc9c6cebd58ca9a21792846bf4f886_JaffaCakes118

    • Size

      3.0MB

    • MD5

      ecbc9c6cebd58ca9a21792846bf4f886

    • SHA1

      12b855e89619bcadf70eace38d1f62f0cb5c7c6f

    • SHA256

      4486879eeb3eb9b6775880f3dc6bb64a316ce86b4e72d565b4e65754d78fd836

    • SHA512

      acd1fb107070e22c8aa1fd91c05833d98dca2d91ef982007781205d512e6230f18daa7b5ec519b8d5d3d9d31006654db56f047f76fe53951d33ab0c8163a7281

    • SSDEEP

      49152:Xc8zmhQljsBQqJr3gZtSFoD37YyAMud8uurGamG:Xc8zr2ONZtioD37YyAMuZuiG

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks