Overview

overview

10

Static

static

3

3e54728fd2...18.exe

windows7-x64

10

3e54728fd2...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e54728fd231994407d763fac974fce0_JaffaCakes118

  • Size

    104KB

  • Sample

    241013-hbd9maxfpl

  • MD5

    3e54728fd231994407d763fac974fce0

  • SHA1

    ca966ae77d381b6b1440c76f119befd51609daa1

  • SHA256

    057e894419f0d1c1f286401ee766c3968465d7ba51f6bd7d74c23aa4ef674e92

  • SHA512

    0ad1fbfa0190e67ddb5c9c6daabbd61998d21e4a382dc7c5390674f898453a519bd6efa317ab52747a43c618ebf6e3dc77e8a155ac962381f389812fce2d0ef1

  • SSDEEP

    1536:1XiwshheUeactU+cWMvmdPQsjVxoOwX+qhxB6UTeT1QzKwa+2KzBvcy6R:kwP1d/cW7jVmt+qx6USJQZdvc1

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      3e54728fd231994407d763fac974fce0_JaffaCakes118

    • Size

      104KB

    • MD5

      3e54728fd231994407d763fac974fce0

    • SHA1

      ca966ae77d381b6b1440c76f119befd51609daa1

    • SHA256

      057e894419f0d1c1f286401ee766c3968465d7ba51f6bd7d74c23aa4ef674e92

    • SHA512

      0ad1fbfa0190e67ddb5c9c6daabbd61998d21e4a382dc7c5390674f898453a519bd6efa317ab52747a43c618ebf6e3dc77e8a155ac962381f389812fce2d0ef1

    • SSDEEP

      1536:1XiwshheUeactU+cWMvmdPQsjVxoOwX+qhxB6UTeT1QzKwa+2KzBvcy6R:kwP1d/cW7jVmt+qx6USJQZdvc1

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks