84dd1194259ad4d36b491a3954fe2e5e8f8763ce21e2df4b70785b33c8b01e61 | Triage

Sharing

General

Target

0fde4d8389d3b9ad55d7206d61d580ba_JaffaCakes118
Size

261KB
Sample

240625-24tdsszakc
MD5

0fde4d8389d3b9ad55d7206d61d580ba
SHA1

42208eeb9ad6e526bdc9d0f846bcfd44eece5790
SHA256

84dd1194259ad4d36b491a3954fe2e5e8f8763ce21e2df4b70785b33c8b01e61
SHA512

c16e887684fb1ff1125814ade67cf4ac37980ab30c6142883be37e5389306f74d1091d11de9561bc940c6587ad85fc2b554247918fd430fcc870d4d419b820d3
SSDEEP

6144:mayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:QCua88SEjbEwvpZBZQfZhh

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  0fde4d8389d3b9ad55d7206d61d580ba_JaffaCakes118
- Size
  
  261KB
- MD5
  
  0fde4d8389d3b9ad55d7206d61d580ba
- SHA1
  
  42208eeb9ad6e526bdc9d0f846bcfd44eece5790
- SHA256
  
  84dd1194259ad4d36b491a3954fe2e5e8f8763ce21e2df4b70785b33c8b01e61
- SHA512
  
  c16e887684fb1ff1125814ade67cf4ac37980ab30c6142883be37e5389306f74d1091d11de9561bc940c6587ad85fc2b554247918fd430fcc870d4d419b820d3
- SSDEEP
  
  6144:mayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:QCua88SEjbEwvpZBZQfZhh
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2