Overview

overview

10

Static

static

3

f5de7a27b2...18.exe

windows7-x64

10

f5de7a27b2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5de7a27b222191e778a605d7c71bc28_JaffaCakes118

  • Size

    220KB

  • Sample

    240925-m6lpeavfja

  • MD5

    f5de7a27b222191e778a605d7c71bc28

  • SHA1

    6f7d05e176160245d99c801465d2721b7da234e6

  • SHA256

    e7b4390cb8c5d67d82f136d47041806c154809300506442f90508d358baf0f4a

  • SHA512

    4317d9eb403c24142cd65316852c87bf614a6a9d5e94987bf65ee941d5eb7874fa77e4a2159539162ab7f99d9d3f5278ddb37fdd1e098ea59f17e5a97de605ce

  • SSDEEP

    3072:JhG4UPS/JwAJeLdUXxRh8cO23RlbVqUCNiLeW33yITZos6iAef:JYGyAgLdUgYVq9o33yUZv6i

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      f5de7a27b222191e778a605d7c71bc28_JaffaCakes118

    • Size

      220KB

    • MD5

      f5de7a27b222191e778a605d7c71bc28

    • SHA1

      6f7d05e176160245d99c801465d2721b7da234e6

    • SHA256

      e7b4390cb8c5d67d82f136d47041806c154809300506442f90508d358baf0f4a

    • SHA512

      4317d9eb403c24142cd65316852c87bf614a6a9d5e94987bf65ee941d5eb7874fa77e4a2159539162ab7f99d9d3f5278ddb37fdd1e098ea59f17e5a97de605ce

    • SSDEEP

      3072:JhG4UPS/JwAJeLdUXxRh8cO23RlbVqUCNiLeW33yITZos6iAef:JYGyAgLdUgYVq9o33yUZv6i

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks