General

  • Target

    fe92b81db3d9edfffe64cc50d10cc700_JaffaCakes118

  • Size

    50KB

  • Sample

    240929-p5ln5avflm

  • MD5

    fe92b81db3d9edfffe64cc50d10cc700

  • SHA1

    b2d06ae48389594245332cf3af2c799f75feaca3

  • SHA256

    d9077b37f4cbf5f359a08fc73d24e2734f46805a09817f91ed94aa66ab747441

  • SHA512

    96cf89ab00e42092e532a90fe5977b26ec16acb282c50a491002426d54d6c0c7069299c08be748f12af38942ac398648e1063740477ca920373e46f6aa20f19d

  • SSDEEP

    768:alSyDq+7vxURIF/X68CQyUPwYX3HgiYaoNkPGqdo/eMRKZVOsIdG5XDGl:aAd4+WF/XhCLigi9oNpqueCKpIA5K

Score
10/10

Malware Config

Targets

    • Target

      fe92b81db3d9edfffe64cc50d10cc700_JaffaCakes118

    • Size

      50KB

    • MD5

      fe92b81db3d9edfffe64cc50d10cc700

    • SHA1

      b2d06ae48389594245332cf3af2c799f75feaca3

    • SHA256

      d9077b37f4cbf5f359a08fc73d24e2734f46805a09817f91ed94aa66ab747441

    • SHA512

      96cf89ab00e42092e532a90fe5977b26ec16acb282c50a491002426d54d6c0c7069299c08be748f12af38942ac398648e1063740477ca920373e46f6aa20f19d

    • SSDEEP

      768:alSyDq+7vxURIF/X68CQyUPwYX3HgiYaoNkPGqdo/eMRKZVOsIdG5XDGl:aAd4+WF/XhCLigi9oNpqueCKpIA5K

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks