Overview

overview

10

Static

static

3

63b5138b0c...18.exe

windows7-x64

10

63b5138b0c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63b5138b0c9807bd6eb32ec1c918fcef_JaffaCakes118

  • Size

    849KB

  • Sample

    240722-sqnfysvdrp

  • MD5

    63b5138b0c9807bd6eb32ec1c918fcef

  • SHA1

    694f8adb44571e2a9cb6bdd1995d0d76542c8a71

  • SHA256

    c7bcdc223fe6b56eecf8721441ca3ada8a93370fb9e4eb67125c59521f998d13

  • SHA512

    50fcf70d4be349dfe963fb3dc2f88ed65452d48e27910b7ced3e0bbb13cfb78670a3d868e83060b7da3f68d994b248ad33e61057f440f3b7b42c43d5962ee0bd

  • SSDEEP

    24576:BjCYPtK2Vdn1vJvS8kCQQWmQQcfCwJ1LQmcjw:NrXBvCCYJQ

Score
10/10
persistence

Malware Config

Targets

    • Target

      63b5138b0c9807bd6eb32ec1c918fcef_JaffaCakes118

    • Size

      849KB

    • MD5

      63b5138b0c9807bd6eb32ec1c918fcef

    • SHA1

      694f8adb44571e2a9cb6bdd1995d0d76542c8a71

    • SHA256

      c7bcdc223fe6b56eecf8721441ca3ada8a93370fb9e4eb67125c59521f998d13

    • SHA512

      50fcf70d4be349dfe963fb3dc2f88ed65452d48e27910b7ced3e0bbb13cfb78670a3d868e83060b7da3f68d994b248ad33e61057f440f3b7b42c43d5962ee0bd

    • SSDEEP

      24576:BjCYPtK2Vdn1vJvS8kCQQWmQQcfCwJ1LQmcjw:NrXBvCCYJQ

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks