Overview

overview

10

Static

static

7

ee3c19d76e...18.exe

windows7-x64

10

ee3c19d76e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee3c19d76edc728c2d7ffac5ae171a3c_JaffaCakes118

  • Size

    352KB

  • Sample

    240920-xnpcpaseja

  • MD5

    ee3c19d76edc728c2d7ffac5ae171a3c

  • SHA1

    2609274008448ea0221a2ca6ea9f98cfb0257024

  • SHA256

    e95de95a1d60a45ca74edd4076322716707aac61006456db528451f2a415d343

  • SHA512

    c16ab6b43b535fd659f9606b2e57d1d6e9b8c18ff277c7ddd01e296f7b0792fb2ff85310c95d3be2c06cdb8007c72833099f18596927684b353da7ca0cb8c03a

  • SSDEEP

    6144:pRWXRdr8bci1Cdg+Al9yh2guMnUkH1Tut7CKpBZgwFxT6TD181iKqyn:pRsQ1CGVc1uTkVqoKbFth120

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ee3c19d76edc728c2d7ffac5ae171a3c_JaffaCakes118

    • Size

      352KB

    • MD5

      ee3c19d76edc728c2d7ffac5ae171a3c

    • SHA1

      2609274008448ea0221a2ca6ea9f98cfb0257024

    • SHA256

      e95de95a1d60a45ca74edd4076322716707aac61006456db528451f2a415d343

    • SHA512

      c16ab6b43b535fd659f9606b2e57d1d6e9b8c18ff277c7ddd01e296f7b0792fb2ff85310c95d3be2c06cdb8007c72833099f18596927684b353da7ca0cb8c03a

    • SSDEEP

      6144:pRWXRdr8bci1Cdg+Al9yh2guMnUkH1Tut7CKpBZgwFxT6TD181iKqyn:pRsQ1CGVc1uTkVqoKbFth120

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks