Overview

overview

10

Static

static

5

058a83deb4...18.exe

windows7-x64

10

058a83deb4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    058a83deb4b5ca454a576c5e84df09f0_JaffaCakes118

  • Size

    19KB

  • Sample

    241001-mzvnqszcne

  • MD5

    058a83deb4b5ca454a576c5e84df09f0

  • SHA1

    de9c5000cd6e888c5d4c7f21621475f9f66ba0b7

  • SHA256

    4081a1df48df595dc59bb733841e53968817fc010e015b55f2570a85f16615cc

  • SHA512

    cc21d00c303dcd7c35cb50bb7aa61fbd6243d31ee4ba50906af6b248a49b66c2ddcb8acbeb58d134066b989ca423cccea9c1620388388fd052f7d9f72be64008

  • SSDEEP

    384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5Xd0PDAMlQ:g5BOFKksO1mE9B77777J77c77c77c71b

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      058a83deb4b5ca454a576c5e84df09f0_JaffaCakes118

    • Size

      19KB

    • MD5

      058a83deb4b5ca454a576c5e84df09f0

    • SHA1

      de9c5000cd6e888c5d4c7f21621475f9f66ba0b7

    • SHA256

      4081a1df48df595dc59bb733841e53968817fc010e015b55f2570a85f16615cc

    • SHA512

      cc21d00c303dcd7c35cb50bb7aa61fbd6243d31ee4ba50906af6b248a49b66c2ddcb8acbeb58d134066b989ca423cccea9c1620388388fd052f7d9f72be64008

    • SSDEEP

      384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5Xd0PDAMlQ:g5BOFKksO1mE9B77777J77c77c77c71b

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks