Overview

overview

10

Static

static

3

fc1011a5e5...18.exe

windows7-x64

10

fc1011a5e5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc1011a5e53f07fb09ea0035f5ea95fc_JaffaCakes118

  • Size

    52KB

  • Sample

    240928-l44lrszdpq

  • MD5

    fc1011a5e53f07fb09ea0035f5ea95fc

  • SHA1

    a3ebf25b474db83e88c9961e2d217037af3d5da9

  • SHA256

    ef4206ac1355c3162db5b0d03fed45c3f557c959820d116891fbe85ab22cf060

  • SHA512

    cbb9df71d8364c3b0435c330596fce0e3ab6a5abe3d9933e90308adf493ed85dbe59aaceaadc0c3b5f9b3acf94a5deff2953dc57bb23523bca30d279108f2d5b

  • SSDEEP

    768:8BE14nTLB3NOH5nJYu1dG02/v7FyN/QEkTMBUrYiIXoAqT/JABHYt+BM8M0:j6LnOH8WGDDu3fBQv6oFTRAB4wB2

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      fc1011a5e53f07fb09ea0035f5ea95fc_JaffaCakes118

    • Size

      52KB

    • MD5

      fc1011a5e53f07fb09ea0035f5ea95fc

    • SHA1

      a3ebf25b474db83e88c9961e2d217037af3d5da9

    • SHA256

      ef4206ac1355c3162db5b0d03fed45c3f557c959820d116891fbe85ab22cf060

    • SHA512

      cbb9df71d8364c3b0435c330596fce0e3ab6a5abe3d9933e90308adf493ed85dbe59aaceaadc0c3b5f9b3acf94a5deff2953dc57bb23523bca30d279108f2d5b

    • SSDEEP

      768:8BE14nTLB3NOH5nJYu1dG02/v7FyN/QEkTMBUrYiIXoAqT/JABHYt+BM8M0:j6LnOH8WGDDu3fBQv6oFTRAB4wB2

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks