General
-
Target
0d9a3d1ac8195f660b8d4cb017e2d703_JaffaCakes118
-
Size
93KB
-
Sample
240625-lrxbxssdjg
-
MD5
0d9a3d1ac8195f660b8d4cb017e2d703
-
SHA1
4907b987e7ac22f1c176c0fea225cd920eef5780
-
SHA256
2e932bc4f993e536a1626c90e908031b6ed31bbd236e15ef4bc7ac384497564a
-
SHA512
5711720e27a95b1de1e1bc3691019ee8044bc94617441e0472f4d8e7160f32151b209d814adf194e4a1f4e24cdd5f40a34e97c8eb349265bee5468fb66e352c9
-
SSDEEP
1536:pA5tXOE3/t+dDcyBpX+VPhek8VRE80LzSDYw4kQv/vrc83lzl8:pA5F3qYKOxn8VRE8OcY1kU/vo81W
Static task
static1
Behavioral task
behavioral1
Sample
0d9a3d1ac8195f660b8d4cb017e2d703_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d9a3d1ac8195f660b8d4cb017e2d703_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0d9a3d1ac8195f660b8d4cb017e2d703_JaffaCakes118
-
Size
93KB
-
MD5
0d9a3d1ac8195f660b8d4cb017e2d703
-
SHA1
4907b987e7ac22f1c176c0fea225cd920eef5780
-
SHA256
2e932bc4f993e536a1626c90e908031b6ed31bbd236e15ef4bc7ac384497564a
-
SHA512
5711720e27a95b1de1e1bc3691019ee8044bc94617441e0472f4d8e7160f32151b209d814adf194e4a1f4e24cdd5f40a34e97c8eb349265bee5468fb66e352c9
-
SSDEEP
1536:pA5tXOE3/t+dDcyBpX+VPhek8VRE80LzSDYw4kQv/vrc83lzl8:pA5F3qYKOxn8VRE8OcY1kU/vo81W
Score6/10-
Modifies WinLogon
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Accessibility Features
1Privilege Escalation
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Accessibility Features
1