Overview

overview

10

Static

static

3

e011cc01d6...18.exe

windows7-x64

5

e011cc01d6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e011cc01d65a1e3cec270b117dfd51a3_JaffaCakes118

  • Size

    68KB

  • Sample

    240914-ncn34s1aqq

  • MD5

    e011cc01d65a1e3cec270b117dfd51a3

  • SHA1

    96e9335b63b912925ae82877c0360852ef1425e5

  • SHA256

    53bcf83b6f91c911b345cebdebe676471028d197bde3e42ba37ba776f287e29d

  • SHA512

    10a749747f04d842cbd93f6cec38aeac0fbc676d31667bb0ff5811435328a20d0259360f82f359485b5a81427a9943d576a16a8ff1c2a8981a0a947c7fe18e17

  • SSDEEP

    1536:KQw83AZMKErqwc99fHiEMU5OIAWa7r1x+J4nonGz/NF37U4z:KQfe91iNvIDa7jHoGjNFw4z

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      e011cc01d65a1e3cec270b117dfd51a3_JaffaCakes118

    • Size

      68KB

    • MD5

      e011cc01d65a1e3cec270b117dfd51a3

    • SHA1

      96e9335b63b912925ae82877c0360852ef1425e5

    • SHA256

      53bcf83b6f91c911b345cebdebe676471028d197bde3e42ba37ba776f287e29d

    • SHA512

      10a749747f04d842cbd93f6cec38aeac0fbc676d31667bb0ff5811435328a20d0259360f82f359485b5a81427a9943d576a16a8ff1c2a8981a0a947c7fe18e17

    • SSDEEP

      1536:KQw83AZMKErqwc99fHiEMU5OIAWa7r1x+J4nonGz/NF37U4z:KQfe91iNvIDa7jHoGjNFw4z

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks