Overview

overview

10

Static

static

3

f6f8655e84...18.exe

windows7-x64

10

f6f8655e84...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f6f8655e843067e626f4ee1e7bf765c7_JaffaCakes118

  • Size

    94KB

  • Sample

    240418-bjpa8sef79

  • MD5

    f6f8655e843067e626f4ee1e7bf765c7

  • SHA1

    62f803fde789dbfbb1b81bf577fc3b2e88d45c40

  • SHA256

    ba9606eb3f418371ba1ca3dee58d73f2864a2179d94dfee8cf3ef5bdd7f98f2f

  • SHA512

    38f096d3530b2d293ee9b4802ba228746f30da71b5a42d38556c2857078281ce937458a207dc59cea14f05990c01da815ef1bf59f11fd80fb2936d329c25ab42

  • SSDEEP

    1536:3yv7hmDVPm/r7WOyrVKcnILxLY90Inkoak+LjW959r+Qi9rg:3yDhoi6HV1ILxLY90Inkoajc9li9rg

Score
10/10
persistence

Malware Config

Targets

    • Target

      f6f8655e843067e626f4ee1e7bf765c7_JaffaCakes118

    • Size

      94KB

    • MD5

      f6f8655e843067e626f4ee1e7bf765c7

    • SHA1

      62f803fde789dbfbb1b81bf577fc3b2e88d45c40

    • SHA256

      ba9606eb3f418371ba1ca3dee58d73f2864a2179d94dfee8cf3ef5bdd7f98f2f

    • SHA512

      38f096d3530b2d293ee9b4802ba228746f30da71b5a42d38556c2857078281ce937458a207dc59cea14f05990c01da815ef1bf59f11fd80fb2936d329c25ab42

    • SSDEEP

      1536:3yv7hmDVPm/r7WOyrVKcnILxLY90Inkoak+LjW959r+Qi9rg:3yDhoi6HV1ILxLY90Inkoajc9li9rg

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks