5b39219d6edd6d37a182ead37cfc05f5894feee014deb01857c99821957931c4 | Triage

Sharing

General

Target

84e8a6f71a9e8b2328524cc9f7efc9fc_JaffaCakes118
Size

76KB
Sample

240810-ftvcfs1dqa
MD5

84e8a6f71a9e8b2328524cc9f7efc9fc
SHA1

031ca9c42fa21f6b00a8f0be02c4500bf496ce9b
SHA256

5b39219d6edd6d37a182ead37cfc05f5894feee014deb01857c99821957931c4
SHA512

0b46b0355dbf23d2bab9cdad929b182bc8313e47608615de4da0d1aac588fe58cf99f91f6e30fdc01e214da939058f98a518d761c85d6f09a1fea2ba1112ae78
SSDEEP

1536:nnsN7d+V0htVpcGBfp9yvWRET5GvAmBD4VHx2f35m:nse0nrcGBf+vWRWsvAmB0VRmc

Score

10^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  84e8a6f71a9e8b2328524cc9f7efc9fc_JaffaCakes118
- Size
  
  76KB
- MD5
  
  84e8a6f71a9e8b2328524cc9f7efc9fc
- SHA1
  
  031ca9c42fa21f6b00a8f0be02c4500bf496ce9b
- SHA256
  
  5b39219d6edd6d37a182ead37cfc05f5894feee014deb01857c99821957931c4
- SHA512
  
  0b46b0355dbf23d2bab9cdad929b182bc8313e47608615de4da0d1aac588fe58cf99f91f6e30fdc01e214da939058f98a518d761c85d6f09a1fea2ba1112ae78
- SSDEEP
  
  1536:nnsN7d+V0htVpcGBfp9yvWRET5GvAmBD4VHx2f35m:nse0nrcGBf+vWRWsvAmB0VRmc
Score

10^/10

defense_evasion discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Hide Artifacts: Hidden Users
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Users

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence