Overview

overview

10

Static

static

3

a1d192b3ce...18.exe

windows7-x64

10

a1d192b3ce...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1d192b3cec859c84b93b70314e7851d_JaffaCakes118

  • Size

    81KB

  • Sample

    240817-j89mgawdkb

  • MD5

    a1d192b3cec859c84b93b70314e7851d

  • SHA1

    c9e6e24251de446b6bff76e4b00f3ee0137fb466

  • SHA256

    77ccbb37dc1fe487df0dbbc4f0a22637e9729899fbe7da83caa4518b6520114d

  • SHA512

    de7ac76fe317082653f1cc67338f06792402719ee7821d35f9c7f18350e35411bdb48b7f44d682e1b4fb6cabede5b1e396f986a099f1c682224db0941ba1c708

  • SSDEEP

    768:BoqfNMCW0hyoqvMtseAeJD+LzeD+9ClfbwbCCvd4YUI2jtXnjH7wQB1ZXs/8gLav:BoqfNMeTv/ZWeAC5CqYqXnjcQZXs1La

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a1d192b3cec859c84b93b70314e7851d_JaffaCakes118

    • Size

      81KB

    • MD5

      a1d192b3cec859c84b93b70314e7851d

    • SHA1

      c9e6e24251de446b6bff76e4b00f3ee0137fb466

    • SHA256

      77ccbb37dc1fe487df0dbbc4f0a22637e9729899fbe7da83caa4518b6520114d

    • SHA512

      de7ac76fe317082653f1cc67338f06792402719ee7821d35f9c7f18350e35411bdb48b7f44d682e1b4fb6cabede5b1e396f986a099f1c682224db0941ba1c708

    • SSDEEP

      768:BoqfNMCW0hyoqvMtseAeJD+LzeD+9ClfbwbCCvd4YUI2jtXnjH7wQB1ZXs/8gLav:BoqfNMeTv/ZWeAC5CqYqXnjcQZXs1La

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks