General

  • Target

    36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118

  • Size

    449KB

  • Sample

    241011-1p9a2azhjp

  • MD5

    36f7e45da5a5ae75c0a33e432b3be972

  • SHA1

    1fef07b9e86239f2498f7906fb09f91c61ef3cf4

  • SHA256

    61b96fe6073ca5d9a2f4a07c4765ff749aa5bcc1eefe570dc1eced1c3af377e2

  • SHA512

    42541e58de1fd789d0cf3c18dadc13a53e76dd5394d01f1740b34ef07a4d4b5b11668be8ccc0a0cc19c691c883906d0b7f6fadafecbc515954551040b8f5bb56

  • SSDEEP

    12288:ZZgJpAIUYkFrrlYWDxhRCIwYeatMR9CUuRq:ZykBemrRCIwYe8MR93uo

Malware Config

Targets

    • Target

      36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118

    • Size

      449KB

    • MD5

      36f7e45da5a5ae75c0a33e432b3be972

    • SHA1

      1fef07b9e86239f2498f7906fb09f91c61ef3cf4

    • SHA256

      61b96fe6073ca5d9a2f4a07c4765ff749aa5bcc1eefe570dc1eced1c3af377e2

    • SHA512

      42541e58de1fd789d0cf3c18dadc13a53e76dd5394d01f1740b34ef07a4d4b5b11668be8ccc0a0cc19c691c883906d0b7f6fadafecbc515954551040b8f5bb56

    • SSDEEP

      12288:ZZgJpAIUYkFrrlYWDxhRCIwYeatMR9CUuRq:ZykBemrRCIwYe8MR93uo

    • Modifies WinLogon for persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks