General
-
Target
66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118
-
Size
250KB
-
Sample
240723-gbwy1azemh
-
MD5
66564f9b68d540541d71e439b8ffeb8e
-
SHA1
9b2464f37dfd430bfe9e9e49bafe7a8205e002d6
-
SHA256
89b10d887f577a3df59dd562c1bc523f159e4ec1cec6c21b17adfdcc6e47f4f9
-
SHA512
e15ef5e1e935d5fcdbf1d7fbcc7c7c3fae357c1ffe2e8409e63538523eb684c25694fdfa96bc7a6927bc4c80b82651e4a8b7b56b44f5fed548e7fc4c372c4cbd
-
SSDEEP
6144:/cjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:EiuZ6Bq1aMWqBTSV
Static task
static1
Behavioral task
behavioral1
Sample
66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118
-
Size
250KB
-
MD5
66564f9b68d540541d71e439b8ffeb8e
-
SHA1
9b2464f37dfd430bfe9e9e49bafe7a8205e002d6
-
SHA256
89b10d887f577a3df59dd562c1bc523f159e4ec1cec6c21b17adfdcc6e47f4f9
-
SHA512
e15ef5e1e935d5fcdbf1d7fbcc7c7c3fae357c1ffe2e8409e63538523eb684c25694fdfa96bc7a6927bc4c80b82651e4a8b7b56b44f5fed548e7fc4c372c4cbd
-
SSDEEP
6144:/cjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:EiuZ6Bq1aMWqBTSV
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Modifies WinLogon
-