Overview

overview

10

Static

static

3

3a686036ed...18.exe

windows7-x64

10

3a686036ed...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a686036edd305f2c1d514ccb7dec25e_JaffaCakes118

  • Size

    82KB

  • Sample

    240711-xx2dlssgkh

  • MD5

    3a686036edd305f2c1d514ccb7dec25e

  • SHA1

    d8c6356671564c6bd1a9fdbafd5542fd107275f6

  • SHA256

    ca4c6933a04cf07d7318d013e2e2a41c94b0432e74b616d5470e4e61dc7b0831

  • SHA512

    425cc13bcf63f28ab987b242635c3b4c5e7d14610d63d5f64f9e2117e3c31dea8e8997fa2c62ffedd4bb4f73d34689d4388479c5799434fb29dc26535b9b7617

  • SSDEEP

    768:+xF4b+xgyv991BpPLeVoWqhSenLOP+mo0PPI+w1gLa1Vf:xbIgC99RWqd6GmfjLaL

Score
10/10
persistence

Malware Config

Targets

    • Target

      3a686036edd305f2c1d514ccb7dec25e_JaffaCakes118

    • Size

      82KB

    • MD5

      3a686036edd305f2c1d514ccb7dec25e

    • SHA1

      d8c6356671564c6bd1a9fdbafd5542fd107275f6

    • SHA256

      ca4c6933a04cf07d7318d013e2e2a41c94b0432e74b616d5470e4e61dc7b0831

    • SHA512

      425cc13bcf63f28ab987b242635c3b4c5e7d14610d63d5f64f9e2117e3c31dea8e8997fa2c62ffedd4bb4f73d34689d4388479c5799434fb29dc26535b9b7617

    • SSDEEP

      768:+xF4b+xgyv991BpPLeVoWqhSenLOP+mo0PPI+w1gLa1Vf:xbIgC99RWqd6GmfjLaL

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks