General
-
Target
48eb2569197fa7ef46488a8526068bb3_JaffaCakes118
-
Size
255KB
-
Sample
240715-jym1qayhmg
-
MD5
48eb2569197fa7ef46488a8526068bb3
-
SHA1
be1992b1fbbd5df9482d5fd2be9a9934848d438d
-
SHA256
0c354bb647619f120369d4c0be7bda20cc1946cca237c0cbf54f988eba7f0342
-
SHA512
0836e4ec03bd48c52c66211bfe9bb97005b2e9b906550de062c0a8f0e14d0e7713172b679c0adbb39ca3aae239c58f32ee97325c14d8896dbb9080940a428443
-
SSDEEP
6144:dNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:dNRdpgdRRoTCD4ijpoix
Static task
static1
Behavioral task
behavioral1
Sample
48eb2569197fa7ef46488a8526068bb3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48eb2569197fa7ef46488a8526068bb3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
48eb2569197fa7ef46488a8526068bb3_JaffaCakes118
-
Size
255KB
-
MD5
48eb2569197fa7ef46488a8526068bb3
-
SHA1
be1992b1fbbd5df9482d5fd2be9a9934848d438d
-
SHA256
0c354bb647619f120369d4c0be7bda20cc1946cca237c0cbf54f988eba7f0342
-
SHA512
0836e4ec03bd48c52c66211bfe9bb97005b2e9b906550de062c0a8f0e14d0e7713172b679c0adbb39ca3aae239c58f32ee97325c14d8896dbb9080940a428443
-
SSDEEP
6144:dNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:dNRdpgdRRoTCD4ijpoix
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Modifies WinLogon
-