Overview

overview

10

Static

static

3

0b1128fa2d...18.exe

windows7-x64

10

0b1128fa2d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b1128fa2d572d8e9696aad97c5d5062_JaffaCakes118

  • Size

    88KB

  • Sample

    241002-rj2jkazgrq

  • MD5

    0b1128fa2d572d8e9696aad97c5d5062

  • SHA1

    24d137bcdcae4365b4c832f441a8bbdaec591bd2

  • SHA256

    64512b2f5c92944c083cd7d09d7352d2936d95e46443ac0d80ae0096336a00e4

  • SHA512

    2a3964b1f209db41ff356db7bd87909e2648a0a254332f677a6cdc025f19c60f5d15938a65099dd673069fbed99c945698097f63689c10c96e361e9f814ca4a0

  • SSDEEP

    1536:Way0J8WzC/48ygbclM55vq3PVYGaLnkZIFxz3sZBIT:ty9KCJygbPudYRne258a

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      0b1128fa2d572d8e9696aad97c5d5062_JaffaCakes118

    • Size

      88KB

    • MD5

      0b1128fa2d572d8e9696aad97c5d5062

    • SHA1

      24d137bcdcae4365b4c832f441a8bbdaec591bd2

    • SHA256

      64512b2f5c92944c083cd7d09d7352d2936d95e46443ac0d80ae0096336a00e4

    • SHA512

      2a3964b1f209db41ff356db7bd87909e2648a0a254332f677a6cdc025f19c60f5d15938a65099dd673069fbed99c945698097f63689c10c96e361e9f814ca4a0

    • SSDEEP

      1536:Way0J8WzC/48ygbclM55vq3PVYGaLnkZIFxz3sZBIT:ty9KCJygbPudYRne258a

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks