Overview

overview

10

Static

static

3

f9f8ef2d59...18.exe

windows7-x64

3

f9f8ef2d59...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f9f8ef2d592492bce1fdccd62bbbfdfe_JaffaCakes118

  • Size

    59KB

  • Sample

    240927-h5xm3a1ekj

  • MD5

    f9f8ef2d592492bce1fdccd62bbbfdfe

  • SHA1

    97676117ce7aca520ba39b463d200a9a3db91b77

  • SHA256

    5f994f3de7379a6f63d8379287b8bdd53a0b7c14a9bb86855945d09dad1d4ef1

  • SHA512

    fa4e888f839c3a81538bd5ad1abdcd470a0fb29f0e44ed642fc0e952094b273834cf64042f50fd5f735dd65890cd67ec453f66553d75e89f0dd910cfbe4df709

  • SSDEEP

    1536:VIR+8N2ruWwBeBLaGCje+alXBV3FG15ENgS1S9:2sKWRaGSPalXLFGH2gSM9

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      f9f8ef2d592492bce1fdccd62bbbfdfe_JaffaCakes118

    • Size

      59KB

    • MD5

      f9f8ef2d592492bce1fdccd62bbbfdfe

    • SHA1

      97676117ce7aca520ba39b463d200a9a3db91b77

    • SHA256

      5f994f3de7379a6f63d8379287b8bdd53a0b7c14a9bb86855945d09dad1d4ef1

    • SHA512

      fa4e888f839c3a81538bd5ad1abdcd470a0fb29f0e44ed642fc0e952094b273834cf64042f50fd5f735dd65890cd67ec453f66553d75e89f0dd910cfbe4df709

    • SSDEEP

      1536:VIR+8N2ruWwBeBLaGCje+alXBV3FG15ENgS1S9:2sKWRaGSPalXLFGH2gSM9

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks