Overview

overview

10

Static

static

3

39270d5b37...18.exe

windows7-x64

10

39270d5b37...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    39270d5b37ef769267606cd09c476b57_JaffaCakes118

  • Size

    85KB

  • Sample

    241012-kemraasarb

  • MD5

    39270d5b37ef769267606cd09c476b57

  • SHA1

    78ce1be5fda36aec5c3ca99972ce78c5fe9e86f3

  • SHA256

    f4b9bd268d9f4b9fd9b594df2d8d3d94629b9bd7cbc549016c535f578cc2b2be

  • SHA512

    1563491a34c0f43b48bb55d7ed07faeb05659151a67711b96ff029dea08a5a297d362629e17573b33836fa05e1dd71703c02ee763b33da052edfc67fee20514f

  • SSDEEP

    1536:W2GoYmbnjewe4po8uaX2T2AX2Z/qPr6T3V3wSzQWQuIFjvy:WxZmbnjewe4po8nX2gZ/qPWT3lIJ

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      39270d5b37ef769267606cd09c476b57_JaffaCakes118

    • Size

      85KB

    • MD5

      39270d5b37ef769267606cd09c476b57

    • SHA1

      78ce1be5fda36aec5c3ca99972ce78c5fe9e86f3

    • SHA256

      f4b9bd268d9f4b9fd9b594df2d8d3d94629b9bd7cbc549016c535f578cc2b2be

    • SHA512

      1563491a34c0f43b48bb55d7ed07faeb05659151a67711b96ff029dea08a5a297d362629e17573b33836fa05e1dd71703c02ee763b33da052edfc67fee20514f

    • SSDEEP

      1536:W2GoYmbnjewe4po8uaX2T2AX2Z/qPr6T3V3wSzQWQuIFjvy:WxZmbnjewe4po8nX2gZ/qPWT3lIJ

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks