Overview

overview

10

Static

static

3

ceec868a99...18.exe

windows7-x64

10

ceec868a99...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ceec868a99bf3b0fac13fc50d47b6c05_JaffaCakes118

  • Size

    462KB

  • Sample

    240906-hlf6zasdle

  • MD5

    ceec868a99bf3b0fac13fc50d47b6c05

  • SHA1

    87b678b1c38488ca31628126a9ba4b3360f1e3f3

  • SHA256

    bda35e21b9ff8f4fc98143948979890c0214fdedeb9bd69c617160154b8c0208

  • SHA512

    aab9c2f65ff5bb09992b06e75c961f9116cfda690fd44c3886de9b1c0c8a19229be01a78b4da7a404f491faaf58f23ef1885a1f48a25ef32aa94faf2f833a75a

  • SSDEEP

    1536:avf1zwQVgQJtdL9uTe/lWFhvzC8k8nChO1QpEcf1zwQVgvJXi+:an1zwLQ/Z9uTe4hvbk8ntQpE81zwLvJ

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ceec868a99bf3b0fac13fc50d47b6c05_JaffaCakes118

    • Size

      462KB

    • MD5

      ceec868a99bf3b0fac13fc50d47b6c05

    • SHA1

      87b678b1c38488ca31628126a9ba4b3360f1e3f3

    • SHA256

      bda35e21b9ff8f4fc98143948979890c0214fdedeb9bd69c617160154b8c0208

    • SHA512

      aab9c2f65ff5bb09992b06e75c961f9116cfda690fd44c3886de9b1c0c8a19229be01a78b4da7a404f491faaf58f23ef1885a1f48a25ef32aa94faf2f833a75a

    • SSDEEP

      1536:avf1zwQVgQJtdL9uTe/lWFhvzC8k8nChO1QpEcf1zwQVgvJXi+:an1zwLQ/Z9uTe4hvbk8ntQpE81zwLvJ

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks