Overview

overview

10

Static

static

3

a6ea658b7e...18.exe

windows7-x64

10

a6ea658b7e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6ea658b7e5f22342ec3d5c5d96041a1_JaffaCakes118

  • Size

    240KB

  • Sample

    240818-q8btrswfkb

  • MD5

    a6ea658b7e5f22342ec3d5c5d96041a1

  • SHA1

    faa65957226e74073ccf28c35636f52d1571dd7d

  • SHA256

    8d8fd6cf6021f94dcabe18df38eff0c8f05a678d958b8cf2107877165cb34099

  • SHA512

    85e8eef2577ac6b8d7d57d685e0453cc624ebfea24ff5e3bfa6decc4a72bac69c35e757090b73b3efd95255bea22002eebe28a01ff189a473647421c94052853

  • SSDEEP

    6144:RElv/SQmLxdOWpbOiacGQ+4/+dvsj76P+NngDxws+dksHP:RE5/SQmL7NbafwCvsjc+FgDzs

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a6ea658b7e5f22342ec3d5c5d96041a1_JaffaCakes118

    • Size

      240KB

    • MD5

      a6ea658b7e5f22342ec3d5c5d96041a1

    • SHA1

      faa65957226e74073ccf28c35636f52d1571dd7d

    • SHA256

      8d8fd6cf6021f94dcabe18df38eff0c8f05a678d958b8cf2107877165cb34099

    • SHA512

      85e8eef2577ac6b8d7d57d685e0453cc624ebfea24ff5e3bfa6decc4a72bac69c35e757090b73b3efd95255bea22002eebe28a01ff189a473647421c94052853

    • SSDEEP

      6144:RElv/SQmLxdOWpbOiacGQ+4/+dvsj76P+NngDxws+dksHP:RE5/SQmL7NbafwCvsjc+FgDzs

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks