General

  • Target

    f5ac37113d87296d57ada326a597c076_JaffaCakes118

  • Size

    56KB

  • Sample

    240925-k4x9bazemg

  • MD5

    f5ac37113d87296d57ada326a597c076

  • SHA1

    366cd275634b3930702abdafa6334d23c1f4d5b6

  • SHA256

    1673ec3cc708e5092276b2104bc1836df8a370f8077eda1a5ae4126212a7c835

  • SHA512

    a0868c003b4421aff90d6b0e59f282d4ac538e5ced85bba208627a758a82b674ae64ad6cc6223a81173af9764004039541b745a3357e805f754c2098f532e0df

  • SSDEEP

    1536:hSl5qwIJHgNrkNUJm7O7T+x2RmGgSD5+TM7BozGd2J3:AlwxGUUsYy2RXgo+TWBozL

Malware Config

Targets

    • Target

      f5ac37113d87296d57ada326a597c076_JaffaCakes118

    • Size

      56KB

    • MD5

      f5ac37113d87296d57ada326a597c076

    • SHA1

      366cd275634b3930702abdafa6334d23c1f4d5b6

    • SHA256

      1673ec3cc708e5092276b2104bc1836df8a370f8077eda1a5ae4126212a7c835

    • SHA512

      a0868c003b4421aff90d6b0e59f282d4ac538e5ced85bba208627a758a82b674ae64ad6cc6223a81173af9764004039541b745a3357e805f754c2098f532e0df

    • SSDEEP

      1536:hSl5qwIJHgNrkNUJm7O7T+x2RmGgSD5+TM7BozGd2J3:AlwxGUUsYy2RXgo+TWBozL

    • Modifies WinLogon for persistence

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks