Overview

overview

7

Static

static

3

f17f2ed8d1...18.exe

windows7-x64

7

f17f2ed8d1...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f17f2ed8d1e046c6627117d25a81fbb4_JaffaCakes118

  • Size

    100KB

  • Sample

    240415-t2hkhsdc2v

  • MD5

    f17f2ed8d1e046c6627117d25a81fbb4

  • SHA1

    ab3bdaf7f543495c0e09af55ad77d2294261afb1

  • SHA256

    ba20375f8f3769e1b105b4c70582ee54f05f546e057bb8bf8878c42677cc0fd4

  • SHA512

    e4bc129576394589dfdf0562e69da94d8481336e39ff04a8c4fb3bdf2a1606f46d9fb6f72fd97376751e37ba2a400c7cc5100f84e437205b75773e7c2ce1fa68

  • SSDEEP

    3072:drRpnM2SMeKrVd/DJBwL9vG3VJWOBRdev/ruQ:drHM2SMekr/VBwB0J7BRsB

Score
7/10
persistence

Malware Config

Targets

    • Target

      f17f2ed8d1e046c6627117d25a81fbb4_JaffaCakes118

    • Size

      100KB

    • MD5

      f17f2ed8d1e046c6627117d25a81fbb4

    • SHA1

      ab3bdaf7f543495c0e09af55ad77d2294261afb1

    • SHA256

      ba20375f8f3769e1b105b4c70582ee54f05f546e057bb8bf8878c42677cc0fd4

    • SHA512

      e4bc129576394589dfdf0562e69da94d8481336e39ff04a8c4fb3bdf2a1606f46d9fb6f72fd97376751e37ba2a400c7cc5100f84e437205b75773e7c2ce1fa68

    • SSDEEP

      3072:drRpnM2SMeKrVd/DJBwL9vG3VJWOBRdev/ruQ:drHM2SMekr/VBwB0J7BRsB

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks