General
-
Target
1fc07c484706bae06fb3dc02d6f44bde_JaffaCakes118
-
Size
186KB
-
Sample
240702-sf8zxascpr
-
MD5
1fc07c484706bae06fb3dc02d6f44bde
-
SHA1
0575d93fb741ccd3f96c70885854ee9f304b704d
-
SHA256
4c8b9e8fd6de1ff5a98e6140da0b0fac4ec7a331ef4cd529ff5b012a7342ad10
-
SHA512
2e89426b844d90b59dea0dd2bc06b06c087ec4f518d6aee57c4c0c8898d4e4bfe8a061467d25f54c9d398007889630b8245673cd6e282db3cab33da1f4dbd0c2
-
SSDEEP
3072:uBKwcvdwuxdWikJR/RMqIgNytCMxA6LeERHP0E1WVKjbsTg:uBKwcvdneWlBtCAA6LoFAPx
Static task
static1
Behavioral task
behavioral1
Sample
1fc07c484706bae06fb3dc02d6f44bde_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
1fc07c484706bae06fb3dc02d6f44bde_JaffaCakes118
-
Size
186KB
-
MD5
1fc07c484706bae06fb3dc02d6f44bde
-
SHA1
0575d93fb741ccd3f96c70885854ee9f304b704d
-
SHA256
4c8b9e8fd6de1ff5a98e6140da0b0fac4ec7a331ef4cd529ff5b012a7342ad10
-
SHA512
2e89426b844d90b59dea0dd2bc06b06c087ec4f518d6aee57c4c0c8898d4e4bfe8a061467d25f54c9d398007889630b8245673cd6e282db3cab33da1f4dbd0c2
-
SSDEEP
3072:uBKwcvdwuxdWikJR/RMqIgNytCMxA6LeERHP0E1WVKjbsTg:uBKwcvdneWlBtCAA6LoFAPx
-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-