dd488462d8cfc1e058bccc758022616e372957a0d9f921f3f7cd2eb89e6f15f1 | Triage

Sharing

General

Target

24fb950a1447624437666f7cccdadf6b_JaffaCakes118
Size

257KB
Sample

240704-hgpmjs1erb
MD5

24fb950a1447624437666f7cccdadf6b
SHA1

8e2c337a3d8e3da93d23a24741a93c26d032cff2
SHA256

dd488462d8cfc1e058bccc758022616e372957a0d9f921f3f7cd2eb89e6f15f1
SHA512

888de935b15b139ef4bd0495988f1e623c496e184d1792a3470bb3c436187a241ea9330050790da5952888f81a3fe8257222783c58929bb3f20c972d61f28b0b
SSDEEP

6144:51Co6nZJbHLtERqwV3wZK2x7sLK1uTtvoyc2Yt:5CXbHLDwV3wZV7sLKqtQn2K

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  24fb950a1447624437666f7cccdadf6b_JaffaCakes118
- Size
  
  257KB
- MD5
  
  24fb950a1447624437666f7cccdadf6b
- SHA1
  
  8e2c337a3d8e3da93d23a24741a93c26d032cff2
- SHA256
  
  dd488462d8cfc1e058bccc758022616e372957a0d9f921f3f7cd2eb89e6f15f1
- SHA512
  
  888de935b15b139ef4bd0495988f1e623c496e184d1792a3470bb3c436187a241ea9330050790da5952888f81a3fe8257222783c58929bb3f20c972d61f28b0b
- SSDEEP
  
  6144:51Co6nZJbHLtERqwV3wZK2x7sLK1uTtvoyc2Yt:5CXbHLDwV3wZV7sLKqtQn2K
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2