Overview

overview

7

Static

static

3

636ad75ca7...18.exe

windows7-x64

7

636ad75ca7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    636ad75ca7d62d98f92059fb8ae67c18_JaffaCakes118

  • Size

    22KB

  • Sample

    240722-q489ga1fnj

  • MD5

    636ad75ca7d62d98f92059fb8ae67c18

  • SHA1

    a9826b4904e908f5cf3155622c282fa4fec193f7

  • SHA256

    0e68c5cf628c8d04f54da65dd6c1bb907bfffa59c1aa1f76df689207a0448621

  • SHA512

    be50b9e535cf3691b30c3c426dd2d5f215c8e2588a79df926df5601eb2e0bc4e481c12e0f09b96525e71f3ac50298a24c38ba4818a0ed40055b99128ea637bc4

  • SSDEEP

    384:k8+b3Pg5PvvNvPb/4QbBefUbh8XKhcdjlNkrgPI4O0lCKem:gPOPHNrCqmjlN3kO5em

Score
7/10
persistence

Malware Config

Targets

    • Target

      636ad75ca7d62d98f92059fb8ae67c18_JaffaCakes118

    • Size

      22KB

    • MD5

      636ad75ca7d62d98f92059fb8ae67c18

    • SHA1

      a9826b4904e908f5cf3155622c282fa4fec193f7

    • SHA256

      0e68c5cf628c8d04f54da65dd6c1bb907bfffa59c1aa1f76df689207a0448621

    • SHA512

      be50b9e535cf3691b30c3c426dd2d5f215c8e2588a79df926df5601eb2e0bc4e481c12e0f09b96525e71f3ac50298a24c38ba4818a0ed40055b99128ea637bc4

    • SSDEEP

      384:k8+b3Pg5PvvNvPb/4QbBefUbh8XKhcdjlNkrgPI4O0lCKem:gPOPHNrCqmjlN3kO5em

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks