c4a257955e1995a74ef1e2a690fa0b94eb01a20377211d01e0a3742f9462e097 | Triage

Sharing

General

Target

9462a362910709bda64b2ddce470ed5d_JaffaCakes118
Size

212KB
Sample

240813-xzcg9swdnj
MD5

9462a362910709bda64b2ddce470ed5d
SHA1

b476f44143d5141b0da63fddb3068530abdb00a7
SHA256

c4a257955e1995a74ef1e2a690fa0b94eb01a20377211d01e0a3742f9462e097
SHA512

8c8c6fd7962b45d9f7bf051c95d49492121b83c81cad103d7cf77048cf8d1c425b3c6c66960fd49f156d56dd4a1a210a1ac878d6b58e084be859c668b0acd4d8
SSDEEP

6144:davW/yVqtW23YmejTb9douEWLCUys0RO:ovLR7TDoz4CDse

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9462a362910709bda64b2ddce470ed5d_JaffaCakes118
- Size
  
  212KB
- MD5
  
  9462a362910709bda64b2ddce470ed5d
- SHA1
  
  b476f44143d5141b0da63fddb3068530abdb00a7
- SHA256
  
  c4a257955e1995a74ef1e2a690fa0b94eb01a20377211d01e0a3742f9462e097
- SHA512
  
  8c8c6fd7962b45d9f7bf051c95d49492121b83c81cad103d7cf77048cf8d1c425b3c6c66960fd49f156d56dd4a1a210a1ac878d6b58e084be859c668b0acd4d8
- SSDEEP
  
  6144:davW/yVqtW23YmejTb9douEWLCUys0RO:ovLR7TDoz4CDse
Score

7^/10

discovery persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence