General

  • Target

    1c50b2118f2ab8f60d4223c1a1c016b5_JaffaCakes118

  • Size

    239KB

  • Sample

    240701-yrd7kawgnb

  • MD5

    1c50b2118f2ab8f60d4223c1a1c016b5

  • SHA1

    cb2bcda326061c0639bdaaa3a5cfe1f9c4ad8a01

  • SHA256

    e809d7f1bed617ba65f621b7ae35f3bbe87fe43c288893174a0a431352187c31

  • SHA512

    6165da0e8861680f465986c9bcd56771b9885cbc4c0eed9f02680f1a0fa1e2c899b51e7f833b58916eaf13a1c0d24e0c787334241b869c14dd8a7ae1364bf092

  • SSDEEP

    6144:pn3/YeakKhXr1ImCIB2Y1PDNZWeLJbAuIfoEBS:q91Im3BDVDT3LxAuUoE

Score
10/10

Malware Config

Targets

    • Target

      1c50b2118f2ab8f60d4223c1a1c016b5_JaffaCakes118

    • Size

      239KB

    • MD5

      1c50b2118f2ab8f60d4223c1a1c016b5

    • SHA1

      cb2bcda326061c0639bdaaa3a5cfe1f9c4ad8a01

    • SHA256

      e809d7f1bed617ba65f621b7ae35f3bbe87fe43c288893174a0a431352187c31

    • SHA512

      6165da0e8861680f465986c9bcd56771b9885cbc4c0eed9f02680f1a0fa1e2c899b51e7f833b58916eaf13a1c0d24e0c787334241b869c14dd8a7ae1364bf092

    • SSDEEP

      6144:pn3/YeakKhXr1ImCIB2Y1PDNZWeLJbAuIfoEBS:q91Im3BDVDT3LxAuUoE

    Score
    10/10
    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks