General

  • Target

    67eef4a158191a02cb070b32b4ce1108_JaffaCakes118

  • Size

    276KB

  • Sample

    240723-rrt5fsxfjf

  • MD5

    67eef4a158191a02cb070b32b4ce1108

  • SHA1

    2dab6e9891d41134e539b4f9d69f702ab48a4170

  • SHA256

    8f5fda61e692b5a017997db9d74a183633f41d210d259dbf4a2dda37515fa259

  • SHA512

    dc5968743bd9af7756098624564e9d99349a219002e3fd7505ec50c2aed72d634b61cf3574d8023eff0fe7b7a1e1a0b85459c7b74419821fb60b21710de0efc5

  • SSDEEP

    6144:M4P885qxrnbQR8vhTcqHR18lGk9mi+BAENW958AwV:Ma8VxDbbvhpHuGfZBAR51wV

Score
10/10

Malware Config

Targets

    • Target

      67eef4a158191a02cb070b32b4ce1108_JaffaCakes118

    • Size

      276KB

    • MD5

      67eef4a158191a02cb070b32b4ce1108

    • SHA1

      2dab6e9891d41134e539b4f9d69f702ab48a4170

    • SHA256

      8f5fda61e692b5a017997db9d74a183633f41d210d259dbf4a2dda37515fa259

    • SHA512

      dc5968743bd9af7756098624564e9d99349a219002e3fd7505ec50c2aed72d634b61cf3574d8023eff0fe7b7a1e1a0b85459c7b74419821fb60b21710de0efc5

    • SSDEEP

      6144:M4P885qxrnbQR8vhTcqHR18lGk9mi+BAENW958AwV:Ma8VxDbbvhpHuGfZBAR51wV

    Score
    10/10
    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks