5254f13a5604594203d3e77b6f8e7ee5dc55806162f42d2888bfe68ef0af127a | Triage

Sharing

General

Target

26660bab22bcc23e66539f31cf79da36_JaffaCakes118
Size

246KB
Sample

240704-11dnha1hmq
MD5

26660bab22bcc23e66539f31cf79da36
SHA1

31a6dbb6566bd74108210f718f0b3ddc17c22d4d
SHA256

5254f13a5604594203d3e77b6f8e7ee5dc55806162f42d2888bfe68ef0af127a
SHA512

045b30e5a1f11d8bdbef064bb8698fa07c23920caeeea783f62a82a79b2e1893a976d91bdce8c9604efdc00603446f7ba2cfc70a46536a5ca715896aa105e637
SSDEEP

6144:7Cu21vYmFPDTI6eWPeBoNtbu7UQeyXIaYLD+5wUa9ZZdJ4V7mn:7k1vY0vJeagiA1xXIa2DSIZaYn

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  26660bab22bcc23e66539f31cf79da36_JaffaCakes118
- Size
  
  246KB
- MD5
  
  26660bab22bcc23e66539f31cf79da36
- SHA1
  
  31a6dbb6566bd74108210f718f0b3ddc17c22d4d
- SHA256
  
  5254f13a5604594203d3e77b6f8e7ee5dc55806162f42d2888bfe68ef0af127a
- SHA512
  
  045b30e5a1f11d8bdbef064bb8698fa07c23920caeeea783f62a82a79b2e1893a976d91bdce8c9604efdc00603446f7ba2cfc70a46536a5ca715896aa105e637
- SSDEEP
  
  6144:7Cu21vYmFPDTI6eWPeBoNtbu7UQeyXIaYLD+5wUa9ZZdJ4V7mn:7k1vY0vJeagiA1xXIa2DSIZaYn
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2