General

  • Target

    ecef94d5edcf0e942786c2ce9a51c0f1_JaffaCakes118

  • Size

    64KB

  • Sample

    240920-gaggxs1cne

  • MD5

    ecef94d5edcf0e942786c2ce9a51c0f1

  • SHA1

    4e207975c6d40420292bfa248d142c31ad9a1c11

  • SHA256

    87bd585ff6e5e74f0932b72a081e11ac34b3740021ffae8acb73062625205352

  • SHA512

    3ac35d5f43ab77fba05967014838d2ef230081bc135395161b8698bf7e3a51cb61b41fc0c931bb6db65144012786adf4bf495cde49711057cf5c1cbbc1a8d0c4

  • SSDEEP

    1536:7e/opfX5/SHWR5XQAAZyYea2kUBVpK4+TMLM:76Q/YWR5XQAAZIjBVp7jo

Malware Config

Targets

    • Target

      ecef94d5edcf0e942786c2ce9a51c0f1_JaffaCakes118

    • Size

      64KB

    • MD5

      ecef94d5edcf0e942786c2ce9a51c0f1

    • SHA1

      4e207975c6d40420292bfa248d142c31ad9a1c11

    • SHA256

      87bd585ff6e5e74f0932b72a081e11ac34b3740021ffae8acb73062625205352

    • SHA512

      3ac35d5f43ab77fba05967014838d2ef230081bc135395161b8698bf7e3a51cb61b41fc0c931bb6db65144012786adf4bf495cde49711057cf5c1cbbc1a8d0c4

    • SSDEEP

      1536:7e/opfX5/SHWR5XQAAZyYea2kUBVpK4+TMLM:76Q/YWR5XQAAZIjBVp7jo

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks