Overview

overview

6

Static

static

3

a0820167ff...18.exe

windows7-x64

6

a0820167ff...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0820167ffa3f052d8dbdc2bb3713c61_JaffaCakes118

  • Size

    40KB

  • Sample

    240817-apzhqawdqf

  • MD5

    a0820167ffa3f052d8dbdc2bb3713c61

  • SHA1

    eb62daaf9bcea18d892addea9544f09c1cdd1c13

  • SHA256

    392e1bfa67ef23b08a7b87c71715e5518b7b1c4fbca5a5589fd2f01a6bd7af0e

  • SHA512

    9bc4ac9d1c2a514f782c02925cd8e8c7c0b2102c0f39b90eb2af271e9e329188de488aaf14a6a81b047ec40db7257f993e7a79fd688771276ac0f742f9a90eb0

  • SSDEEP

    768:6l3JY6niPHsK6qQ8qObFo+zIXX+YAS41XTpHvO4bs1QP+:6l3Tni0KKBObFlP1XT5Ox1QP+

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      a0820167ffa3f052d8dbdc2bb3713c61_JaffaCakes118

    • Size

      40KB

    • MD5

      a0820167ffa3f052d8dbdc2bb3713c61

    • SHA1

      eb62daaf9bcea18d892addea9544f09c1cdd1c13

    • SHA256

      392e1bfa67ef23b08a7b87c71715e5518b7b1c4fbca5a5589fd2f01a6bd7af0e

    • SHA512

      9bc4ac9d1c2a514f782c02925cd8e8c7c0b2102c0f39b90eb2af271e9e329188de488aaf14a6a81b047ec40db7257f993e7a79fd688771276ac0f742f9a90eb0

    • SSDEEP

      768:6l3JY6niPHsK6qQ8qObFo+zIXX+YAS41XTpHvO4bs1QP+:6l3Tni0KKBObFlP1XT5Ox1QP+

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks