Overview

overview

10

Static

static

3

b5b963668b...18.exe

windows7-x64

3

b5b963668b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5b963668b1d08c0132a9842cb74f97d_JaffaCakes118

  • Size

    291KB

  • Sample

    240822-a9flcatdlm

  • MD5

    b5b963668b1d08c0132a9842cb74f97d

  • SHA1

    3a481be8404f2be8db77ed0e6c3b744605ae2213

  • SHA256

    b071f3b7e8bfc39097b6171edd40353dacb328cdab5784c3fada140fc381c0d9

  • SHA512

    46eb5af0b563e579ff664909ab07117aa0a8bb8d577bdd026cba9c22972e8a4e21fc0252ec362e59c1c14d6318813d15499ead8599d15a8ec9b4736e19077adf

  • SSDEEP

    6144:wgwGTO0SvWYHbLUiRadIpq376fINzIw5EeKZ7FbTu/hUKee:jTSvWYHMiRbqLGINzIw5DKfi/r

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      b5b963668b1d08c0132a9842cb74f97d_JaffaCakes118

    • Size

      291KB

    • MD5

      b5b963668b1d08c0132a9842cb74f97d

    • SHA1

      3a481be8404f2be8db77ed0e6c3b744605ae2213

    • SHA256

      b071f3b7e8bfc39097b6171edd40353dacb328cdab5784c3fada140fc381c0d9

    • SHA512

      46eb5af0b563e579ff664909ab07117aa0a8bb8d577bdd026cba9c22972e8a4e21fc0252ec362e59c1c14d6318813d15499ead8599d15a8ec9b4736e19077adf

    • SSDEEP

      6144:wgwGTO0SvWYHbLUiRadIpq376fINzIw5EeKZ7FbTu/hUKee:jTSvWYHMiRbqLGINzIw5DKfi/r

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks