Overview

overview

10

Static

static

7

ed3313f068...18.exe

windows7-x64

10

ed3313f068...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed3313f06888b71eb38d083de1e78954_JaffaCakes118

  • Size

    229KB

  • Sample

    240920-kbcf5sxbmb

  • MD5

    ed3313f06888b71eb38d083de1e78954

  • SHA1

    9037a4de0487f8567329c21163a0a4e4b8027887

  • SHA256

    cfe365aa54afbdaeb80058bf75d8e5f830a92e3fb0e725b5a5b91a1d6d95d8ba

  • SHA512

    5eaf85bcc0c836e34f41ec82bcf5b39c740a5cc100463577cf1e06420060b1f6c2b78d1c3baa4989b353ad9cd0d6996bacb2748a184106477fa0f9a575d7d3bc

  • SSDEEP

    6144:yO793pVUnTDR1CWnRouAtwi7GeMK7DoWsLWu23Usuajv:v3psRRozCi7GeMK7kW6a7uov

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      ed3313f06888b71eb38d083de1e78954_JaffaCakes118

    • Size

      229KB

    • MD5

      ed3313f06888b71eb38d083de1e78954

    • SHA1

      9037a4de0487f8567329c21163a0a4e4b8027887

    • SHA256

      cfe365aa54afbdaeb80058bf75d8e5f830a92e3fb0e725b5a5b91a1d6d95d8ba

    • SHA512

      5eaf85bcc0c836e34f41ec82bcf5b39c740a5cc100463577cf1e06420060b1f6c2b78d1c3baa4989b353ad9cd0d6996bacb2748a184106477fa0f9a575d7d3bc

    • SSDEEP

      6144:yO793pVUnTDR1CWnRouAtwi7GeMK7DoWsLWu23Usuajv:v3psRRozCi7GeMK7kW6a7uov

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks