Overview

overview

10

Static

static

3

f9fdbb4a14...18.exe

windows7-x64

10

f9fdbb4a14...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118

  • Size

    125KB

  • Sample

    240927-jfyz9svcnf

  • MD5

    f9fdbb4a14b44446a1a0f8cc579588f9

  • SHA1

    fc064c03af384b58958b389c25b44801390a9045

  • SHA256

    46aa6721dd86ea3e6644c3440d6c6d0e1c1730fee0c6039e06c8798f3acc3a7a

  • SHA512

    84999a207592f7919125646afe881e705a9d6512f119f801586cf7bc452954ebb52482e5091a1ba31d59398422dd79546ddbf3005ae5b6470bbfc66fd97bc396

  • SSDEEP

    3072:oCCKkf2v2vHnMQ3bmxryhiDloHxsoJ2y0ZIhtOc4MExf7vOA:BN2vH93bkyEZ+e0b/nuGA

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118

    • Size

      125KB

    • MD5

      f9fdbb4a14b44446a1a0f8cc579588f9

    • SHA1

      fc064c03af384b58958b389c25b44801390a9045

    • SHA256

      46aa6721dd86ea3e6644c3440d6c6d0e1c1730fee0c6039e06c8798f3acc3a7a

    • SHA512

      84999a207592f7919125646afe881e705a9d6512f119f801586cf7bc452954ebb52482e5091a1ba31d59398422dd79546ddbf3005ae5b6470bbfc66fd97bc396

    • SSDEEP

      3072:oCCKkf2v2vHnMQ3bmxryhiDloHxsoJ2y0ZIhtOc4MExf7vOA:BN2vH93bkyEZ+e0b/nuGA

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks