Overview

overview

10

Static

static

3

ed7106c2fe...18.exe

windows7-x64

10

ed7106c2fe...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed7106c2fe2aaa98b9c79c264f5061e5_JaffaCakes118

  • Size

    376KB

  • Sample

    240920-m4v53ataqq

  • MD5

    ed7106c2fe2aaa98b9c79c264f5061e5

  • SHA1

    760e2e1e1f6527752443cd28e6b78da10a5a84fc

  • SHA256

    cb3c38b3b2899a486fb1ebe0f2aae837fd5f29d99d512cf2cad58d1d7a31a5bd

  • SHA512

    071ca7b0745d95d9ff6325a7939288a346b8dec66b5e606a65fb71e4b80eb712ca7e5a478ef95e4107d3ad91294fd3113302b0735d3c94f0b548406f5392ea9c

  • SSDEEP

    3072:+sJlOGa8bJl3VmP5t5Y5t5o5t5P5t5PyJ4:+87jMP7+767p7

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ed7106c2fe2aaa98b9c79c264f5061e5_JaffaCakes118

    • Size

      376KB

    • MD5

      ed7106c2fe2aaa98b9c79c264f5061e5

    • SHA1

      760e2e1e1f6527752443cd28e6b78da10a5a84fc

    • SHA256

      cb3c38b3b2899a486fb1ebe0f2aae837fd5f29d99d512cf2cad58d1d7a31a5bd

    • SHA512

      071ca7b0745d95d9ff6325a7939288a346b8dec66b5e606a65fb71e4b80eb712ca7e5a478ef95e4107d3ad91294fd3113302b0735d3c94f0b548406f5392ea9c

    • SSDEEP

      3072:+sJlOGa8bJl3VmP5t5Y5t5o5t5P5t5PyJ4:+87jMP7+767p7

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks