General
-
Target
0a206b0c588f4b182759f0730723288c_JaffaCakes118
-
Size
55KB
-
Sample
240624-w3t12szbpk
-
MD5
0a206b0c588f4b182759f0730723288c
-
SHA1
2de756fd504b33d8e524021376d013f32e561744
-
SHA256
ea2e9767605f95d8b760ab8c1c96f5e449617d73b91dc9e7ee774ad3155e1ae7
-
SHA512
faa2b8fe05de3595e3ffb35f2f5f9824c8f21ae1384cc019e2e096286f5afefc71818defd5c7477c2f1b802d78a95bd282c799bb1e008a130086515e2b49f212
-
SSDEEP
768:UcGr2BAooBkncFlwpAyc/PQJ96rpLAvgMNeM3JxmV8lI9en/p2dC5Ew/v3:UcGKBABFep/l6dkBpJxmV8vGq
Static task
static1
Behavioral task
behavioral1
Sample
0a206b0c588f4b182759f0730723288c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a206b0c588f4b182759f0730723288c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0a206b0c588f4b182759f0730723288c_JaffaCakes118
-
Size
55KB
-
MD5
0a206b0c588f4b182759f0730723288c
-
SHA1
2de756fd504b33d8e524021376d013f32e561744
-
SHA256
ea2e9767605f95d8b760ab8c1c96f5e449617d73b91dc9e7ee774ad3155e1ae7
-
SHA512
faa2b8fe05de3595e3ffb35f2f5f9824c8f21ae1384cc019e2e096286f5afefc71818defd5c7477c2f1b802d78a95bd282c799bb1e008a130086515e2b49f212
-
SSDEEP
768:UcGr2BAooBkncFlwpAyc/PQJ96rpLAvgMNeM3JxmV8lI9en/p2dC5Ew/v3:UcGKBABFep/l6dkBpJxmV8vGq
Score7/10-
Boot or Logon Autostart Execution: Print Processors
Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
-
Drops file in System32 directory
-