Overview

overview

10

Static

static

3

0832b340ef...18.exe

windows7-x64

10

0832b340ef...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0832b340efc21b7fd68b3989c9dbd69b_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240624-newwqssgrn

  • MD5

    0832b340efc21b7fd68b3989c9dbd69b

  • SHA1

    ef8a533520e4ea8642ef9283bbce57fecf635954

  • SHA256

    cf76a03fb75b23a2987b631cc11b318e51136ddae7d4e1054e4965435406381b

  • SHA512

    8f80c484ce03dd463964ec056115eba69d27d8b6fe356246ad43d93fbc28ca0f67a639f3089e0a7982b6b056c87021eb1ff05200459bac24d469cf4c5365ab0d

  • SSDEEP

    24576:eNPKGskPakey3S59R919Lf3TlLVAmRe3ynrI3hNz+Yg0TY3U5+OoVSt02r+ivk6n:bkBC59R9HxBlBrI7SYY3UkV6vrpv1SRG

Score
10/10
persistence

Malware Config

Targets

    • Target

      0832b340efc21b7fd68b3989c9dbd69b_JaffaCakes118

    • Size

      2.1MB

    • MD5

      0832b340efc21b7fd68b3989c9dbd69b

    • SHA1

      ef8a533520e4ea8642ef9283bbce57fecf635954

    • SHA256

      cf76a03fb75b23a2987b631cc11b318e51136ddae7d4e1054e4965435406381b

    • SHA512

      8f80c484ce03dd463964ec056115eba69d27d8b6fe356246ad43d93fbc28ca0f67a639f3089e0a7982b6b056c87021eb1ff05200459bac24d469cf4c5365ab0d

    • SSDEEP

      24576:eNPKGskPakey3S59R919Lf3TlLVAmRe3ynrI3hNz+Yg0TY3U5+OoVSt02r+ivk6n:bkBC59R9HxBlBrI7SYY3UkV6vrpv1SRG

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks