Overview

overview

10

Static

static

3

365e195a92...18.exe

windows7-x64

10

365e195a92...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    365e195a921c601e4a96c844cf6cc779_JaffaCakes118

  • Size

    252KB

  • Sample

    240710-zvg83azcqr

  • MD5

    365e195a921c601e4a96c844cf6cc779

  • SHA1

    3f88021b1dc6d6308480d0ed06659d8687a1b6ed

  • SHA256

    3e68c5654aa20024acd7fb78570e05ab11d5cf24d7b73e7bd5c54f4aa0e1e2f6

  • SHA512

    d28656b331f2aa28a472fc6eef3835db0b9c0bf753c923834e7e2b2cf6c6bb3710c9e27e2fc07a412aaddd7f8f2d103fba86c5f36a0c4dc34d0917b98246a177

  • SSDEEP

    6144:AUAifuWI91r96cry9SCSCSCSpSKS0StS1SeSlS4SESsSm4:x9uWIt6Z9SCSCSCSpSKS0StS1SeSlS4Q

Score
10/10
persistence

Malware Config

Targets

    • Target

      365e195a921c601e4a96c844cf6cc779_JaffaCakes118

    • Size

      252KB

    • MD5

      365e195a921c601e4a96c844cf6cc779

    • SHA1

      3f88021b1dc6d6308480d0ed06659d8687a1b6ed

    • SHA256

      3e68c5654aa20024acd7fb78570e05ab11d5cf24d7b73e7bd5c54f4aa0e1e2f6

    • SHA512

      d28656b331f2aa28a472fc6eef3835db0b9c0bf753c923834e7e2b2cf6c6bb3710c9e27e2fc07a412aaddd7f8f2d103fba86c5f36a0c4dc34d0917b98246a177

    • SSDEEP

      6144:AUAifuWI91r96cry9SCSCSCSpSKS0StS1SeSlS4SESsSm4:x9uWIt6Z9SCSCSCSpSKS0StS1SeSlS4Q

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks