General
-
Target
b8c921f75c6d4d24818ad6171628f922_JaffaCakes118
-
Size
213KB
-
Sample
240404-p3mteagg96
-
MD5
b8c921f75c6d4d24818ad6171628f922
-
SHA1
08453176a0eca5c92e29d22fd333150b782095d7
-
SHA256
156f276b8f252f669aaf57851be098570ebd7b1317f9571d495a707edc33fe25
-
SHA512
15962da73a5009fd2e741ae91e106341b2cd61fe534254d6ca5c46956f79172cd6b2ac6f3d69ae61bdf86e0d6417c306ea862278fc8f9b682d29a58484a7264e
-
SSDEEP
6144:Q731bdBaB7/RFW9jgrFPJVFU/zElctSB2fklIEa:C1bIRFjxxI/4ctSsk5a
Static task
static1
Behavioral task
behavioral1
Sample
b8c921f75c6d4d24818ad6171628f922_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8c921f75c6d4d24818ad6171628f922_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
b8c921f75c6d4d24818ad6171628f922_JaffaCakes118
-
Size
213KB
-
MD5
b8c921f75c6d4d24818ad6171628f922
-
SHA1
08453176a0eca5c92e29d22fd333150b782095d7
-
SHA256
156f276b8f252f669aaf57851be098570ebd7b1317f9571d495a707edc33fe25
-
SHA512
15962da73a5009fd2e741ae91e106341b2cd61fe534254d6ca5c46956f79172cd6b2ac6f3d69ae61bdf86e0d6417c306ea862278fc8f9b682d29a58484a7264e
-
SSDEEP
6144:Q731bdBaB7/RFW9jgrFPJVFU/zElctSB2fklIEa:C1bIRFjxxI/4ctSsk5a
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-