Overview

overview

10

Static

static

3

8420cde966...18.exe

windows7-x64

10

8420cde966...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8420cde966094a4165ed5f6160fee8b5_JaffaCakes118

  • Size

    80KB

  • Sample

    240810-am2v3awhjj

  • MD5

    8420cde966094a4165ed5f6160fee8b5

  • SHA1

    55129d9f051acb7d7dc78135eeb1afb17d07bfa9

  • SHA256

    3cb4cf39fd42e256a8fdeaf83e50c006e5f1ad4da80592c0ce5c281bb05f80c2

  • SHA512

    1d180acf9058c87576ef5c38fc57086eeb0ca04c738134e0ad70a69409b1bf3010a6a32d06b541a65c550bbce738c40c5f802c21597b0921fbfc2d0056fc32b4

  • SSDEEP

    768:2JfIhrOhrlBB1dGn4HQ/aSjaAato92ah0vZRr2NdkDg3e3UmaRxaY71dsBpKcTDI:uIhr8d6Z/p7atEhKZ55gIaRhdsRxOcS

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      8420cde966094a4165ed5f6160fee8b5_JaffaCakes118

    • Size

      80KB

    • MD5

      8420cde966094a4165ed5f6160fee8b5

    • SHA1

      55129d9f051acb7d7dc78135eeb1afb17d07bfa9

    • SHA256

      3cb4cf39fd42e256a8fdeaf83e50c006e5f1ad4da80592c0ce5c281bb05f80c2

    • SHA512

      1d180acf9058c87576ef5c38fc57086eeb0ca04c738134e0ad70a69409b1bf3010a6a32d06b541a65c550bbce738c40c5f802c21597b0921fbfc2d0056fc32b4

    • SSDEEP

      768:2JfIhrOhrlBB1dGn4HQ/aSjaAato92ah0vZRr2NdkDg3e3UmaRxaY71dsBpKcTDI:uIhr8d6Z/p7atEhKZ55gIaRhdsRxOcS

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks