Overview

overview

10

Static

static

7

eef4cf9b4f...18.exe

windows7-x64

7

eef4cf9b4f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eef4cf9b4fc936adeb5dea03562faddd_JaffaCakes118

  • Size

    82KB

  • Sample

    240921-dk91fascjb

  • MD5

    eef4cf9b4fc936adeb5dea03562faddd

  • SHA1

    15513f809923ba83a5c689cd0782891e3a17d194

  • SHA256

    94c15c9e48895e62dc20a7920b93da630fdf4967237114032d91fe4ecddf05a9

  • SHA512

    808c53228f4f99f4db323e7b23ab65c9d364c78ec3d37359740b85600675e46c475ee5277c8710c9f64bbe73d5ecc45ea669a92b4b514e43e9ad72f15e8bba7f

  • SSDEEP

    1536:JAiEnK6uPZ1UtdEcOi3j9qu2VvFklSbXk5bjLzhHyUK+IYcws9Zi610XlMbdkA6I:JHL/Dzi3j9v2VvFk2Xk5bThHyV7YKvnf

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      eef4cf9b4fc936adeb5dea03562faddd_JaffaCakes118

    • Size

      82KB

    • MD5

      eef4cf9b4fc936adeb5dea03562faddd

    • SHA1

      15513f809923ba83a5c689cd0782891e3a17d194

    • SHA256

      94c15c9e48895e62dc20a7920b93da630fdf4967237114032d91fe4ecddf05a9

    • SHA512

      808c53228f4f99f4db323e7b23ab65c9d364c78ec3d37359740b85600675e46c475ee5277c8710c9f64bbe73d5ecc45ea669a92b4b514e43e9ad72f15e8bba7f

    • SSDEEP

      1536:JAiEnK6uPZ1UtdEcOi3j9qu2VvFklSbXk5bjLzhHyUK+IYcws9Zi610XlMbdkA6I:JHL/Dzi3j9v2VvFk2Xk5bThHyV7YKvnf

    Score
    10/10
    discoveryupxpersistence

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks