Overview

overview

10

Static

static

3

1a0f794621...18.exe

windows7-x64

5

1a0f794621...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a0f79462186dfbd5ae910e132422816_JaffaCakes118

  • Size

    566KB

  • Sample

    240628-pblf9s1fmq

  • MD5

    1a0f79462186dfbd5ae910e132422816

  • SHA1

    eadde1f3998c0dfa2338241d020686174df9d151

  • SHA256

    f2f8f14f50a59f6bc81bbadd721d033d7852ddb303c17de5c68a299d071142f7

  • SHA512

    72e8a5e7b2a7fa7a0634a49d39f406ca8acc4619374725b8fd64ae88c49c4b95a65d7330b0235a83ee29e776c8ff4cd5a6b09b8e8cb87c35d50b5bb9fe19b3f9

  • SSDEEP

    12288:KLbg3zLNEz1s9z+RBZpuq8xBaanWbWZcLDqO8GW8kqOMFJkLjJ:Abgz+1Oz+RfpnYnQUcLDq9GW8JFJwt

Score
10/10
persistence

Malware Config

Targets

    • Target

      1a0f79462186dfbd5ae910e132422816_JaffaCakes118

    • Size

      566KB

    • MD5

      1a0f79462186dfbd5ae910e132422816

    • SHA1

      eadde1f3998c0dfa2338241d020686174df9d151

    • SHA256

      f2f8f14f50a59f6bc81bbadd721d033d7852ddb303c17de5c68a299d071142f7

    • SHA512

      72e8a5e7b2a7fa7a0634a49d39f406ca8acc4619374725b8fd64ae88c49c4b95a65d7330b0235a83ee29e776c8ff4cd5a6b09b8e8cb87c35d50b5bb9fe19b3f9

    • SSDEEP

      12288:KLbg3zLNEz1s9z+RBZpuq8xBaanWbWZcLDqO8GW8kqOMFJkLjJ:Abgz+1Oz+RfpnYnQUcLDq9GW8JFJwt

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks