Overview

overview

10

Static

static

3

eed545a854...18.exe

windows7-x64

10

eed545a854...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eed545a854ece23d746a0e6a89bc72d9_JaffaCakes118

  • Size

    304KB

  • Sample

    240921-b4azcayhre

  • MD5

    eed545a854ece23d746a0e6a89bc72d9

  • SHA1

    0a271ecc7db5f0bf3151a455bac335b43d350682

  • SHA256

    cd3f9d23719231cd510b252746d34f798e6214132282b5d1c6107af281765fe1

  • SHA512

    6dc49d713e317d1f91b6abd7d554cf611111629cc250ce909537333d99f778a56fede14b5a3a1a98d9ba9531618e596e4b8bb4c5d8f60d89ab51142e3bc0a47e

  • SSDEEP

    6144:GA7TgGATIr4tccyvkhznX75wS5f8evpmu:b7ATIMbnwg4

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      eed545a854ece23d746a0e6a89bc72d9_JaffaCakes118

    • Size

      304KB

    • MD5

      eed545a854ece23d746a0e6a89bc72d9

    • SHA1

      0a271ecc7db5f0bf3151a455bac335b43d350682

    • SHA256

      cd3f9d23719231cd510b252746d34f798e6214132282b5d1c6107af281765fe1

    • SHA512

      6dc49d713e317d1f91b6abd7d554cf611111629cc250ce909537333d99f778a56fede14b5a3a1a98d9ba9531618e596e4b8bb4c5d8f60d89ab51142e3bc0a47e

    • SSDEEP

      6144:GA7TgGATIr4tccyvkhznX75wS5f8evpmu:b7ATIMbnwg4

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks