Overview

overview

10

Static

static

3

0fd996f6a1...18.exe

windows7-x64

5

0fd996f6a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fd996f6a163b6404cbabe4584b91e7a_JaffaCakes118

  • Size

    174KB

  • Sample

    240625-2zvq3a1frp

  • MD5

    0fd996f6a163b6404cbabe4584b91e7a

  • SHA1

    fd79815744a93b8522d1f42f8bc31d7f5680d856

  • SHA256

    c4f85e0767a0153c5f978c0d072de7089fb669b770f2774b3b893a9c40f5681e

  • SHA512

    899fb01e5e722e16a232f34b977140b850f2a70e8173f67dd4f7f989f93ecdc2c4052aec96c23370015646424405d5a70c738acc9ea5ad67e46103d64316ea73

  • SSDEEP

    3072:FbDvHdp6Y/rHp5qkMLJxXdyfhPXfeAdYMPeVTWC2X/BVB/QZpQyiXA+d:xdp6IHTqki7dyZPXf1SMy2PBH/In+

Score
10/10
persistence

Malware Config

Targets

    • Target

      0fd996f6a163b6404cbabe4584b91e7a_JaffaCakes118

    • Size

      174KB

    • MD5

      0fd996f6a163b6404cbabe4584b91e7a

    • SHA1

      fd79815744a93b8522d1f42f8bc31d7f5680d856

    • SHA256

      c4f85e0767a0153c5f978c0d072de7089fb669b770f2774b3b893a9c40f5681e

    • SHA512

      899fb01e5e722e16a232f34b977140b850f2a70e8173f67dd4f7f989f93ecdc2c4052aec96c23370015646424405d5a70c738acc9ea5ad67e46103d64316ea73

    • SSDEEP

      3072:FbDvHdp6Y/rHp5qkMLJxXdyfhPXfeAdYMPeVTWC2X/BVB/QZpQyiXA+d:xdp6IHTqki7dyZPXf1SMy2PBH/In+

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks