Overview

overview

6

Static

static

5

f578a3e6ee...18.exe

windows7-x64

6

f578a3e6ee...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    f578a3e6eedeae147f26e3c81198637a_JaffaCakes118

  • Size

    152KB

  • Sample

    240925-h1h9wasblr

  • MD5

    f578a3e6eedeae147f26e3c81198637a

  • SHA1

    73f4f01f5a149192d3c1dc2c014d22653c5a9da4

  • SHA256

    bf55a5463f29df35928b58290ec245672409c206b36e9333c724d383548578d3

  • SHA512

    0fda1e21d75a586eff8be6d5c0eeec605598151c89e443b438cd751a25a1600037d45b247f7760cafb5cf7706811c251e0cc5b918d540b814fe034e469f67b94

  • SSDEEP

    1536:3f73Ri7+ueTBdPafVjErsyTlU5sU3xGUG4UhAcI2roRjGWe3Zv5ArH7MnT+qjIty:P7ueG9ErYsU+AcI2rv3bo7MnTqtQdhZX

Score
6/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      f578a3e6eedeae147f26e3c81198637a_JaffaCakes118

    • Size

      152KB

    • MD5

      f578a3e6eedeae147f26e3c81198637a

    • SHA1

      73f4f01f5a149192d3c1dc2c014d22653c5a9da4

    • SHA256

      bf55a5463f29df35928b58290ec245672409c206b36e9333c724d383548578d3

    • SHA512

      0fda1e21d75a586eff8be6d5c0eeec605598151c89e443b438cd751a25a1600037d45b247f7760cafb5cf7706811c251e0cc5b918d540b814fe034e469f67b94

    • SSDEEP

      1536:3f73Ri7+ueTBdPafVjErsyTlU5sU3xGUG4UhAcI2roRjGWe3Zv5ArH7MnT+qjIty:P7ueG9ErYsU+AcI2rv3bo7MnTqtQdhZX

    Score
    6/10
    discoverypersistenceupx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks