66fe97d107a5259718617fc3835dfefb0f31dc8f09c4aa63447da03e9f117c0b | Triage

Sharing

General

Target

83b830fa3912f1d5dc7b5341a87a5947_JaffaCakes118
Size

361KB
Sample

240809-1ytxpsvgkc
MD5

83b830fa3912f1d5dc7b5341a87a5947
SHA1

07e6318258746f508fa182678c27aa5988520f68
SHA256

66fe97d107a5259718617fc3835dfefb0f31dc8f09c4aa63447da03e9f117c0b
SHA512

d05940e124b85b2e45ac7854f91bb661039e6f245c25a605b06a31a9258338a2f4907453c3328ad3fc73b984f70d078bcdbcd5e713f8538fef047c9321f270bd
SSDEEP

6144:wG7rBi2J7TuqnVnD7CdYpr4D3Uxsq1x5oCoeGQ9F5YkaIoBF1JOB:T3BSe7NpcrUxs1CZB9FmkadBNOB

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  83b830fa3912f1d5dc7b5341a87a5947_JaffaCakes118
- Size
  
  361KB
- MD5
  
  83b830fa3912f1d5dc7b5341a87a5947
- SHA1
  
  07e6318258746f508fa182678c27aa5988520f68
- SHA256
  
  66fe97d107a5259718617fc3835dfefb0f31dc8f09c4aa63447da03e9f117c0b
- SHA512
  
  d05940e124b85b2e45ac7854f91bb661039e6f245c25a605b06a31a9258338a2f4907453c3328ad3fc73b984f70d078bcdbcd5e713f8538fef047c9321f270bd
- SSDEEP
  
  6144:wG7rBi2J7TuqnVnD7CdYpr4D3Uxsq1x5oCoeGQ9F5YkaIoBF1JOB:T3BSe7NpcrUxs1CZB9FmkadBNOB
Score

7^/10

discovery persistence
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence