Overview

overview

10

Static

static

3

3faedeccf7...18.exe

windows7-x64

10

3faedeccf7...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3faedeccf7627fd3acf6c44154b8a6dd_JaffaCakes118

  • Size

    91KB

  • Sample

    240713-b1py4asdpa

  • MD5

    3faedeccf7627fd3acf6c44154b8a6dd

  • SHA1

    880a73af0f70c253d7da8ac3b17d7ddec582ebc7

  • SHA256

    0523d9b0c207ca5719c45eeff40358057cfa0783072c88b2ffe2269bf77eae85

  • SHA512

    2e7cce28da5a2b6e1de3129c956990cbc193c10cc5d8d5b7af586b640901afefe9319c3833ea68c4d7987ffe7f9abca4ad7f6fb7e57c6fd79ba34c6593587503

  • SSDEEP

    1536:kGTzpswSdXNgFopevPFFvDQOKfgXTb/cFLaC:kGTzcd9gFopsdbbMk

Score
10/10
persistence

Malware Config

Targets

    • Target

      3faedeccf7627fd3acf6c44154b8a6dd_JaffaCakes118

    • Size

      91KB

    • MD5

      3faedeccf7627fd3acf6c44154b8a6dd

    • SHA1

      880a73af0f70c253d7da8ac3b17d7ddec582ebc7

    • SHA256

      0523d9b0c207ca5719c45eeff40358057cfa0783072c88b2ffe2269bf77eae85

    • SHA512

      2e7cce28da5a2b6e1de3129c956990cbc193c10cc5d8d5b7af586b640901afefe9319c3833ea68c4d7987ffe7f9abca4ad7f6fb7e57c6fd79ba34c6593587503

    • SSDEEP

      1536:kGTzpswSdXNgFopevPFFvDQOKfgXTb/cFLaC:kGTzcd9gFopsdbbMk

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks