Overview

overview

10

Static

static

3

a3ac30b0a1...18.exe

windows7-x64

10

a3ac30b0a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3ac30b0a1f2aedb182b1ec747f52d4f_JaffaCakes118

  • Size

    244KB

  • Sample

    240817-w85dzazgma

  • MD5

    a3ac30b0a1f2aedb182b1ec747f52d4f

  • SHA1

    cc0d357c02e6cc239e54970289d46e59c7a44cb3

  • SHA256

    97320ac1f91359e565f1b00a1b3c87aa7b56b528a279bc4fed69b8aca0cca010

  • SHA512

    acc4a665a6988f629c7a88fdc77a3d34cfeb72df8fb35ef6ac7b70e2ad45562fb8fb0233eb588b00155286fa314d78c050734caa2ec77ac11147426bea974a68

  • SSDEEP

    1536:Vf1zwQVgWWu1ealF1lBHsukk+wtN6Vp4f1zwQVgv/F6z+:F1zwLWWu1eWfBHOk+wAp41zwLv/

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a3ac30b0a1f2aedb182b1ec747f52d4f_JaffaCakes118

    • Size

      244KB

    • MD5

      a3ac30b0a1f2aedb182b1ec747f52d4f

    • SHA1

      cc0d357c02e6cc239e54970289d46e59c7a44cb3

    • SHA256

      97320ac1f91359e565f1b00a1b3c87aa7b56b528a279bc4fed69b8aca0cca010

    • SHA512

      acc4a665a6988f629c7a88fdc77a3d34cfeb72df8fb35ef6ac7b70e2ad45562fb8fb0233eb588b00155286fa314d78c050734caa2ec77ac11147426bea974a68

    • SSDEEP

      1536:Vf1zwQVgWWu1ealF1lBHsukk+wtN6Vp4f1zwQVgv/F6z+:F1zwLWWu1eWfBHOk+wAp41zwLv/

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks