General

  • Target

    12e92b8113d09eb55810266071126ce0_JaffaCakes118

  • Size

    194KB

  • Sample

    241004-l9ff5ayaqq

  • MD5

    12e92b8113d09eb55810266071126ce0

  • SHA1

    28ebd5c9e20502d5db53fff773fc87f3179db9ef

  • SHA256

    23599569949d45d095e9ad635200c2ec7789ff23ee5dd5954d29f32033951501

  • SHA512

    06707b094341a111368361b6ed183b5e4f524d3ca85021ded499daa0ff1d5d3dabff66e99666cb64392cd79989036e71b4ee924e71b88debc6515b1dabfc5039

  • SSDEEP

    6144:iX+CVCWf0dh2BcQjCFBUOEfy6iUpz1KTQIz7UbrF1q:oJRcdh2BcQjCrUOEfyfczkTQIMbrF1q

Score
10/10

Malware Config

Targets

    • Target

      12e92b8113d09eb55810266071126ce0_JaffaCakes118

    • Size

      194KB

    • MD5

      12e92b8113d09eb55810266071126ce0

    • SHA1

      28ebd5c9e20502d5db53fff773fc87f3179db9ef

    • SHA256

      23599569949d45d095e9ad635200c2ec7789ff23ee5dd5954d29f32033951501

    • SHA512

      06707b094341a111368361b6ed183b5e4f524d3ca85021ded499daa0ff1d5d3dabff66e99666cb64392cd79989036e71b4ee924e71b88debc6515b1dabfc5039

    • SSDEEP

      6144:iX+CVCWf0dh2BcQjCFBUOEfy6iUpz1KTQIz7UbrF1q:oJRcdh2BcQjCrUOEfyfczkTQIMbrF1q

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks