Overview

overview

10

Static

static

3

fcd3b48550...18.exe

windows7-x64

3

fcd3b48550...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcd3b4855039e3b882d1f6be8e72279e_JaffaCakes118

  • Size

    463KB

  • Sample

    240928-wc9ntayarp

  • MD5

    fcd3b4855039e3b882d1f6be8e72279e

  • SHA1

    144162a851860f353a46493c6adb145660821a26

  • SHA256

    5bcbc87234a5aa312167b90ce0b24620f45a582ef4cfda460159cda52e51033f

  • SHA512

    0843258c1e1ced040635e2e27887eed17616fa8056b6f45d956c52225a5688602a2b005c56e7726ef702795fd28e66629552bdce6cec0f7f6bab664247cb6ee6

  • SSDEEP

    12288:rk8NlyiAifIV2RyVCuoYmRLinrpitQS9kRSe60yHRiiGGDrzG8VS8:5lzfluCfHsiCYkRU0s/Q8

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      fcd3b4855039e3b882d1f6be8e72279e_JaffaCakes118

    • Size

      463KB

    • MD5

      fcd3b4855039e3b882d1f6be8e72279e

    • SHA1

      144162a851860f353a46493c6adb145660821a26

    • SHA256

      5bcbc87234a5aa312167b90ce0b24620f45a582ef4cfda460159cda52e51033f

    • SHA512

      0843258c1e1ced040635e2e27887eed17616fa8056b6f45d956c52225a5688602a2b005c56e7726ef702795fd28e66629552bdce6cec0f7f6bab664247cb6ee6

    • SSDEEP

      12288:rk8NlyiAifIV2RyVCuoYmRLinrpitQS9kRSe60yHRiiGGDrzG8VS8:5lzfluCfHsiCYkRU0s/Q8

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks