Overview

overview

10

Static

static

1

ee70269767...18.exe

windows7-x64

10

ee70269767...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee702697678035626ed75f89fa7bcdb5_JaffaCakes118

  • Size

    262KB

  • Sample

    240920-z4zvgaydqq

  • MD5

    ee702697678035626ed75f89fa7bcdb5

  • SHA1

    8f3a29e20470462d2cf1f66bcc14b6d90ebfc605

  • SHA256

    08bd4c6afb3cf682b949bc4b1853a2e98b14d37569dd61d21724e6cc0c75ef53

  • SHA512

    e23981d512c2892097d502cd9da929a34e9f2e824ccaaca5cb7c11bccb425f6a33247db042fb9cf9eb323e99909647312687234220ba759ab7014e81b2abffae

  • SSDEEP

    6144:lqCbbe+R6SjMbnysLWN682NCYRDXlcTwgLnJF8UF7w68q5:pbe+IlbnBiNHYDVYwgLJFNF

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ee702697678035626ed75f89fa7bcdb5_JaffaCakes118

    • Size

      262KB

    • MD5

      ee702697678035626ed75f89fa7bcdb5

    • SHA1

      8f3a29e20470462d2cf1f66bcc14b6d90ebfc605

    • SHA256

      08bd4c6afb3cf682b949bc4b1853a2e98b14d37569dd61d21724e6cc0c75ef53

    • SHA512

      e23981d512c2892097d502cd9da929a34e9f2e824ccaaca5cb7c11bccb425f6a33247db042fb9cf9eb323e99909647312687234220ba759ab7014e81b2abffae

    • SSDEEP

      6144:lqCbbe+R6SjMbnysLWN682NCYRDXlcTwgLnJF8UF7w68q5:pbe+IlbnBiNHYDVYwgLJFNF

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks