Overview

overview

10

Static

static

3

03beac3afc...18.exe

windows7-x64

10

03beac3afc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03beac3afcc5a9b76c61b379117ab4c8_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240427-15xl6saa4v

  • MD5

    03beac3afcc5a9b76c61b379117ab4c8

  • SHA1

    b73baee44f126066414e867ed9e755649b8d0381

  • SHA256

    bcd053711d20c9abbc48d0b2146f70124ce63f71310b6997acfcc0aa0543d404

  • SHA512

    808af708c03ad94e94325a3df51db056238e956599595e91d3ccca094314d5a5e067ad8f28331ac42ec21b7ec6392aeb5f46e70295cd3d3fe30a5a890647e39d

  • SSDEEP

    49152:9WAMXZZaYGPeVALqx95dXLrnURAwrcD6BvvTxLKyc2A7u3Idr9x7EY:aX2YA2Aw9LbrnWFg+BvLtKLuYdr9H

Score
10/10
persistence

Malware Config

Targets

    • Target

      03beac3afcc5a9b76c61b379117ab4c8_JaffaCakes118

    • Size

      2.2MB

    • MD5

      03beac3afcc5a9b76c61b379117ab4c8

    • SHA1

      b73baee44f126066414e867ed9e755649b8d0381

    • SHA256

      bcd053711d20c9abbc48d0b2146f70124ce63f71310b6997acfcc0aa0543d404

    • SHA512

      808af708c03ad94e94325a3df51db056238e956599595e91d3ccca094314d5a5e067ad8f28331ac42ec21b7ec6392aeb5f46e70295cd3d3fe30a5a890647e39d

    • SSDEEP

      49152:9WAMXZZaYGPeVALqx95dXLrnURAwrcD6BvvTxLKyc2A7u3Idr9x7EY:aX2YA2Aw9LbrnWFg+BvLtKLuYdr9H

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks