Overview

overview

10

Static

static

3

ecdb578d7a...18.exe

windows7-x64

10

ecdb578d7a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecdb578d7aab5ba42c2c99bdb80eaa28_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240920-fah53szblj

  • MD5

    ecdb578d7aab5ba42c2c99bdb80eaa28

  • SHA1

    532c6a870df0451d157f6cea55e2e3e3ea4a38de

  • SHA256

    2bfeecb07dac4cfbc5aac46cda268086591c04a48143fd9b655d6a9a49fa1e4a

  • SHA512

    f6e8bd93564b29cec70c66a18d0a323abebc5a7268c82d97450c41bebd94d280aab354fc1c007cd37336cf80eea1e380197dba7daaf32269787d896d341f4d7f

  • SSDEEP

    192:c2/2VgqKGxmQtAy2dNQOa099GfsvYgmhT9zHJxhlQtAwimP1oyG+RakdG:c2/vg0xlGHjRNvQtAjQ14+tE

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ecdb578d7aab5ba42c2c99bdb80eaa28_JaffaCakes118

    • Size

      2.1MB

    • MD5

      ecdb578d7aab5ba42c2c99bdb80eaa28

    • SHA1

      532c6a870df0451d157f6cea55e2e3e3ea4a38de

    • SHA256

      2bfeecb07dac4cfbc5aac46cda268086591c04a48143fd9b655d6a9a49fa1e4a

    • SHA512

      f6e8bd93564b29cec70c66a18d0a323abebc5a7268c82d97450c41bebd94d280aab354fc1c007cd37336cf80eea1e380197dba7daaf32269787d896d341f4d7f

    • SSDEEP

      192:c2/2VgqKGxmQtAy2dNQOa099GfsvYgmhT9zHJxhlQtAwimP1oyG+RakdG:c2/vg0xlGHjRNvQtAjQ14+tE

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks