Overview

overview

10

Static

static

3

8bd0182680...18.exe

windows7-x64

10

8bd0182680...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bd018268066a89b130bc7ca0b66dffe_JaffaCakes118

  • Size

    37KB

  • Sample

    240811-y2nhzszgmh

  • MD5

    8bd018268066a89b130bc7ca0b66dffe

  • SHA1

    93dc8066388a30ba83dddf5200bc959b8c643cb6

  • SHA256

    4d8e0818998ed088213eb34afb5ebcccf2cdde1d90faa97957045f8db4f03431

  • SHA512

    d35a1ebb48f6a0171f95cf376eb34529196b620d99a220d30fc96fed3a268f84e00da1907a4ca322e10b0b5093c312a9206d969eb69eedb93adc19eca26d7913

  • SSDEEP

    768:iE0Yi85oTK9n9zzX8ej3lTReG6MI+4j90:sYh5oTgzzX5ll56M94jW

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      8bd018268066a89b130bc7ca0b66dffe_JaffaCakes118

    • Size

      37KB

    • MD5

      8bd018268066a89b130bc7ca0b66dffe

    • SHA1

      93dc8066388a30ba83dddf5200bc959b8c643cb6

    • SHA256

      4d8e0818998ed088213eb34afb5ebcccf2cdde1d90faa97957045f8db4f03431

    • SHA512

      d35a1ebb48f6a0171f95cf376eb34529196b620d99a220d30fc96fed3a268f84e00da1907a4ca322e10b0b5093c312a9206d969eb69eedb93adc19eca26d7913

    • SSDEEP

      768:iE0Yi85oTK9n9zzX8ej3lTReG6MI+4j90:sYh5oTgzzX5ll56M94jW

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks