Overview

overview

10

Static

static

3

3877cbb8d4...18.exe

windows7-x64

6

3877cbb8d4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3877cbb8d481d264d9f4d4070f916beb_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240711-kt71rsygpr

  • MD5

    3877cbb8d481d264d9f4d4070f916beb

  • SHA1

    b0cf628f77a62d2c456406d9ac2b19f2151aff4f

  • SHA256

    18b6c36266a8df2a1779c0fe05b4fdfcfeca779358c970e093524b830f128761

  • SHA512

    6592eee0d2430c11dc6dc6bf5bc56b5b0c55c10a59b04e485b321610c25ec2f518487f4cb80998addc418a99a1ba34b3ed36ebb1314197fa9105676559d40817

  • SSDEEP

    24576:eNPKr5ZEOnNFJ6Zx/N3mDyaunZ+F7L1WgAo2dh/8XTrZqXVOZ:PZ9bEZJy6d6DrN

Score
10/10
persistence

Malware Config

Targets

    • Target

      3877cbb8d481d264d9f4d4070f916beb_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3877cbb8d481d264d9f4d4070f916beb

    • SHA1

      b0cf628f77a62d2c456406d9ac2b19f2151aff4f

    • SHA256

      18b6c36266a8df2a1779c0fe05b4fdfcfeca779358c970e093524b830f128761

    • SHA512

      6592eee0d2430c11dc6dc6bf5bc56b5b0c55c10a59b04e485b321610c25ec2f518487f4cb80998addc418a99a1ba34b3ed36ebb1314197fa9105676559d40817

    • SSDEEP

      24576:eNPKr5ZEOnNFJ6Zx/N3mDyaunZ+F7L1WgAo2dh/8XTrZqXVOZ:PZ9bEZJy6d6DrN

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks