Overview

overview

10

Static

static

3

105e23d87c...18.exe

windows7-x64

10

105e23d87c...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    105e23d87c826aa8b7b3c708e582aee8_JaffaCakes118

  • Size

    120KB

  • Sample

    241003-yz7h3svarp

  • MD5

    105e23d87c826aa8b7b3c708e582aee8

  • SHA1

    da8c1c04e25590abc52d8ced0806ca1e31b14b69

  • SHA256

    143ac1d8c6be80fb2792b44865c1378fb269a87d9a65e421b4cc45b18968e5ab

  • SHA512

    5f8ee2d9ab31f17759bee3ceed718aed0fa9422e6f65bc92abe0d8fb1fec3ef0ec1819deaa305dad31fada4cffd62e1d84aea1ca5f26519608d8273b4add0fef

  • SSDEEP

    3072:9tKrx0hzRoPoWsHRel8aRM6RBDMZA1f0hzROby:7EOAPj3B/DdGmby

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      105e23d87c826aa8b7b3c708e582aee8_JaffaCakes118

    • Size

      120KB

    • MD5

      105e23d87c826aa8b7b3c708e582aee8

    • SHA1

      da8c1c04e25590abc52d8ced0806ca1e31b14b69

    • SHA256

      143ac1d8c6be80fb2792b44865c1378fb269a87d9a65e421b4cc45b18968e5ab

    • SHA512

      5f8ee2d9ab31f17759bee3ceed718aed0fa9422e6f65bc92abe0d8fb1fec3ef0ec1819deaa305dad31fada4cffd62e1d84aea1ca5f26519608d8273b4add0fef

    • SSDEEP

      3072:9tKrx0hzRoPoWsHRel8aRM6RBDMZA1f0hzROby:7EOAPj3B/DdGmby

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks