Overview

overview

10

Static

static

3

a635b5069a...18.exe

windows7-x64

10

a635b5069a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a635b5069a38aeb28b374243fcf0bba2_JaffaCakes118

  • Size

    48KB

  • Sample

    240818-k8mndazbpr

  • MD5

    a635b5069a38aeb28b374243fcf0bba2

  • SHA1

    9a738172b56285e247103fabe0c52bc2e573b251

  • SHA256

    687d244f0b996a57b1e7876c131cad886d2c9d6cc842d6dbfb74facf109a7403

  • SHA512

    cbdf4cec803ee495d7dc6b5f315e9c5c9b7e80ea0989500d4801c3ebe02fbccc28c12456896b21dd630f9a2c416d91d9a56afa6f5d9d293ed20c5f67016952f6

  • SSDEEP

    1536:v+BFaf9e5nfifvVSogKDs7h6m8ZM+McdoXtK:CFoQ5nfifNSOY7h6m8bkXtK

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a635b5069a38aeb28b374243fcf0bba2_JaffaCakes118

    • Size

      48KB

    • MD5

      a635b5069a38aeb28b374243fcf0bba2

    • SHA1

      9a738172b56285e247103fabe0c52bc2e573b251

    • SHA256

      687d244f0b996a57b1e7876c131cad886d2c9d6cc842d6dbfb74facf109a7403

    • SHA512

      cbdf4cec803ee495d7dc6b5f315e9c5c9b7e80ea0989500d4801c3ebe02fbccc28c12456896b21dd630f9a2c416d91d9a56afa6f5d9d293ed20c5f67016952f6

    • SSDEEP

      1536:v+BFaf9e5nfifvVSogKDs7h6m8ZM+McdoXtK:CFoQ5nfifNSOY7h6m8bkXtK

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks