f1c53ac181456a1212fad9c313ea10a3cdd152a2dc33dd5ff5d9a89c2a67c6f2 | Triage

Sharing

General

Target

0c174b09f22265a937e5969f41232c94_JaffaCakes118
Size

35KB
Sample

240625-c4mhtawfmb
MD5

0c174b09f22265a937e5969f41232c94
SHA1

1c0ab2c187d89742a882c4332a19c944207b7cbc
SHA256

f1c53ac181456a1212fad9c313ea10a3cdd152a2dc33dd5ff5d9a89c2a67c6f2
SHA512

542fbacc5d0a340f6a9621e888c586bc2d74e481e98a13f0703c638ed98d40c8360bdb2ed814c25582fc51cc9a0538ecff7d96fcd0967404b051ee74e0652391
SSDEEP

768:xdLf7gPwb9Tzt1oshhhT37lR9HXwon1mgOq:82kshhhbhRrnN

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  0c174b09f22265a937e5969f41232c94_JaffaCakes118
- Size
  
  35KB
- MD5
  
  0c174b09f22265a937e5969f41232c94
- SHA1
  
  1c0ab2c187d89742a882c4332a19c944207b7cbc
- SHA256
  
  f1c53ac181456a1212fad9c313ea10a3cdd152a2dc33dd5ff5d9a89c2a67c6f2
- SHA512
  
  542fbacc5d0a340f6a9621e888c586bc2d74e481e98a13f0703c638ed98d40c8360bdb2ed814c25582fc51cc9a0538ecff7d96fcd0967404b051ee74e0652391
- SSDEEP
  
  768:xdLf7gPwb9Tzt1oshhhT37lR9HXwon1mgOq:82kshhhbhRrnN
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2