General
-
Target
0ae6e41a93d6c3f647777737fd8a5968_JaffaCakes118
-
Size
49KB
-
Sample
240624-15r2pavcjd
-
MD5
0ae6e41a93d6c3f647777737fd8a5968
-
SHA1
b7f36145a8ed4a3d090c4ed61e8f184882f08e25
-
SHA256
a0d711bbec104520bea4674301c8339759b884bdd3b0283a995efb423c2812a7
-
SHA512
0be5bc852bd3ff8ec629f884c9b6af3b293d9e14b2c4ab3aac54b2d65e1ace3ab04d3cd1c013f62f06e44be2205335923606881d7aaf44b11b50810ac8f1ee07
-
SSDEEP
768:b9PnhAko1bO5KEiET5rb8MdhWL4JdAouUXKW6EZ5hl+aaaaaaaaZhr:bZhAko1abj9rgWZAouU6WLnhwp
Behavioral task
behavioral1
Sample
0ae6e41a93d6c3f647777737fd8a5968_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ae6e41a93d6c3f647777737fd8a5968_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0ae6e41a93d6c3f647777737fd8a5968_JaffaCakes118
-
Size
49KB
-
MD5
0ae6e41a93d6c3f647777737fd8a5968
-
SHA1
b7f36145a8ed4a3d090c4ed61e8f184882f08e25
-
SHA256
a0d711bbec104520bea4674301c8339759b884bdd3b0283a995efb423c2812a7
-
SHA512
0be5bc852bd3ff8ec629f884c9b6af3b293d9e14b2c4ab3aac54b2d65e1ace3ab04d3cd1c013f62f06e44be2205335923606881d7aaf44b11b50810ac8f1ee07
-
SSDEEP
768:b9PnhAko1bO5KEiET5rb8MdhWL4JdAouUXKW6EZ5hl+aaaaaaaaZhr:bZhAko1abj9rgWZAouU6WLnhwp
Score10/10-
Modifies WinLogon for persistence
-
Suspicious use of SetThreadContext
-