Overview

overview

10

Static

static

3

0c23ccb174...18.exe

windows7-x64

10

0c23ccb174...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c23ccb174c3bbaee427012fe4299fe7_JaffaCakes118

  • Size

    64KB

  • Sample

    241002-x2e16ssekq

  • MD5

    0c23ccb174c3bbaee427012fe4299fe7

  • SHA1

    e15d6feb188f6abe04af41a732b6e2d90a8b5568

  • SHA256

    9ddd3e195799809656459e765eaebea26afb8a790588f42bf989e62e9cbe8e4d

  • SHA512

    83ea6152601863e6b9c72bb07b5d15939a237ecbd634c9eee3d5d1c03e4d3055a3646b689b6d278ead485164286cbd2287a6e59812fe11ccd450239e272be3eb

  • SSDEEP

    768:dbkZ9ZcJ/xjbJFS+WXqmQ03nNxOfvcDryk42O4tQSeN8LdOtW9m6g/yb0yQXB:Na0JxjbJbk/jDrF1Z5OamP/

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      0c23ccb174c3bbaee427012fe4299fe7_JaffaCakes118

    • Size

      64KB

    • MD5

      0c23ccb174c3bbaee427012fe4299fe7

    • SHA1

      e15d6feb188f6abe04af41a732b6e2d90a8b5568

    • SHA256

      9ddd3e195799809656459e765eaebea26afb8a790588f42bf989e62e9cbe8e4d

    • SHA512

      83ea6152601863e6b9c72bb07b5d15939a237ecbd634c9eee3d5d1c03e4d3055a3646b689b6d278ead485164286cbd2287a6e59812fe11ccd450239e272be3eb

    • SSDEEP

      768:dbkZ9ZcJ/xjbJFS+WXqmQ03nNxOfvcDryk42O4tQSeN8LdOtW9m6g/yb0yQXB:Na0JxjbJbk/jDrF1Z5OamP/

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks