Overview

overview

10

Static

static

3

18a2b33d11...18.exe

windows7-x64

10

18a2b33d11...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    18a2b33d115d3be7c8969d350823380c_JaffaCakes118

  • Size

    28KB

  • Sample

    240628-d449asygpg

  • MD5

    18a2b33d115d3be7c8969d350823380c

  • SHA1

    03fa33de9bcf6fd8c96233258428446a58b7f9ac

  • SHA256

    22968e0b3963e9801600518f6212ac92ca6c14a6e22ed24f292a82557dc642d2

  • SHA512

    01163fbd008fb0e3e46897c3000bff258b72cf3619c32403edf774a4f465b00a8ee75711af7a48d32798e6533a29189043667ea281871513be35c3ba06766dbf

  • SSDEEP

    384:oGiZoqe4eI9vlAdWfVGPZ8URB8GmSKamkTCAoBZ4Rx4RPUfKlIiqPYS:oHOqe3I9vGdWuBvmTaDTMa2R8fjPYS

Score
10/10
persistence

Malware Config

Targets

    • Target

      18a2b33d115d3be7c8969d350823380c_JaffaCakes118

    • Size

      28KB

    • MD5

      18a2b33d115d3be7c8969d350823380c

    • SHA1

      03fa33de9bcf6fd8c96233258428446a58b7f9ac

    • SHA256

      22968e0b3963e9801600518f6212ac92ca6c14a6e22ed24f292a82557dc642d2

    • SHA512

      01163fbd008fb0e3e46897c3000bff258b72cf3619c32403edf774a4f465b00a8ee75711af7a48d32798e6533a29189043667ea281871513be35c3ba06766dbf

    • SSDEEP

      384:oGiZoqe4eI9vlAdWfVGPZ8URB8GmSKamkTCAoBZ4Rx4RPUfKlIiqPYS:oHOqe3I9vGdWuBvmTaDTMa2R8fjPYS

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks