Overview

overview

10

Static

static

3

ed33d86d99...18.exe

windows7-x64

10

ed33d86d99...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed33d86d99f0cc2a2b4bd2d07407e5d0_JaffaCakes118

  • Size

    200KB

  • Sample

    240920-kcgggsxbrf

  • MD5

    ed33d86d99f0cc2a2b4bd2d07407e5d0

  • SHA1

    3b42fcd60945da50fec1c20748a7d3a8377d7308

  • SHA256

    b0881acc8cfc692ef53fcd425c79f127c505f74879690a88037a0e5f49682453

  • SHA512

    0ea268f68621ed2d6ced6012e563d0cc1bb751abcd2babc1065065fab687e7a54b3b0d088beb398a123f0bcb72b9dfd17b82e7cee56b6244a34ac754d982ec45

  • SSDEEP

    3072:D42KNBwDTBtfOKgNtuYT+MZfH1BAQCo+tJ3x3wLWfnn43skCrxVtXXbpnVFF3:zWBoTBtgz6IfH//CfJ9nYkjtXXbFVFh

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ed33d86d99f0cc2a2b4bd2d07407e5d0_JaffaCakes118

    • Size

      200KB

    • MD5

      ed33d86d99f0cc2a2b4bd2d07407e5d0

    • SHA1

      3b42fcd60945da50fec1c20748a7d3a8377d7308

    • SHA256

      b0881acc8cfc692ef53fcd425c79f127c505f74879690a88037a0e5f49682453

    • SHA512

      0ea268f68621ed2d6ced6012e563d0cc1bb751abcd2babc1065065fab687e7a54b3b0d088beb398a123f0bcb72b9dfd17b82e7cee56b6244a34ac754d982ec45

    • SSDEEP

      3072:D42KNBwDTBtfOKgNtuYT+MZfH1BAQCo+tJ3x3wLWfnn43skCrxVtXXbpnVFF3:zWBoTBtgz6IfH//CfJ9nYkjtXXbFVFh

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks