d2c02c56b347d9efcc89c60e23c01296e84e35f3266968296124c39e15f958df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

734d778184ff66fc9168ee87c6a4920e_JaffaCakes118
Size

112KB
Sample

240726-kegj9sxalr
MD5

734d778184ff66fc9168ee87c6a4920e
SHA1

9b47d0e0e7ad994274b3e438541c11b6884c3913
SHA256

d2c02c56b347d9efcc89c60e23c01296e84e35f3266968296124c39e15f958df
SHA512

a1f6c284e4619aa3d4c0235c69efc555a2652209847d64e4ee78024e0f17bd2926ccdd053df7f4d903ed12280ebbe3117335b0f5f207a3c434e0016c67fae201
SSDEEP

3072:vBQmP9Xi2lThrMjCPdjc8QMmNkxF6ERFedYHe1lD:ZQmVXqjAjcNMmNfoHe1J

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  734d778184ff66fc9168ee87c6a4920e_JaffaCakes118
- Size
  
  112KB
- MD5
  
  734d778184ff66fc9168ee87c6a4920e
- SHA1
  
  9b47d0e0e7ad994274b3e438541c11b6884c3913
- SHA256
  
  d2c02c56b347d9efcc89c60e23c01296e84e35f3266968296124c39e15f958df
- SHA512
  
  a1f6c284e4619aa3d4c0235c69efc555a2652209847d64e4ee78024e0f17bd2926ccdd053df7f4d903ed12280ebbe3117335b0f5f207a3c434e0016c67fae201
- SSDEEP
  
  3072:vBQmP9Xi2lThrMjCPdjc8QMmNkxF6ERFedYHe1lD:ZQmVXqjAjcNMmNfoHe1J
Score

6^/10

discovery persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence