b55a4183b3d1d81af87afc4d0770239c8bdf645c0867d1af4e6d20a46561f104 | Triage

Sharing

General

Target

a5f00f1b1576a2cc8f24cd105cc736b1_JaffaCakes118
Size

51KB
Sample

240818-jhs7sswdjq
MD5

a5f00f1b1576a2cc8f24cd105cc736b1
SHA1

164d5a3730c3f098586d85eb5809dd958730eb55
SHA256

b55a4183b3d1d81af87afc4d0770239c8bdf645c0867d1af4e6d20a46561f104
SHA512

bf75d0fd420be15f168206bae7ac142234dfbc04bea0b1d8386e9236d763e32c8cc998543e56fdab80262c382a8e8c8583f39831a6952eaada958fbe16ef2f45
SSDEEP

768:SxfclrFapGEhNVorGNQPU6yZuhlB1oYN1y0GJNwM9lc1iNb5l6q:SmlRbQGTyUlBbfk39lcEt5lf

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a5f00f1b1576a2cc8f24cd105cc736b1_JaffaCakes118
- Size
  
  51KB
- MD5
  
  a5f00f1b1576a2cc8f24cd105cc736b1
- SHA1
  
  164d5a3730c3f098586d85eb5809dd958730eb55
- SHA256
  
  b55a4183b3d1d81af87afc4d0770239c8bdf645c0867d1af4e6d20a46561f104
- SHA512
  
  bf75d0fd420be15f168206bae7ac142234dfbc04bea0b1d8386e9236d763e32c8cc998543e56fdab80262c382a8e8c8583f39831a6952eaada958fbe16ef2f45
- SSDEEP
  
  768:SxfclrFapGEhNVorGNQPU6yZuhlB1oYN1y0GJNwM9lc1iNb5l6q:SmlRbQGTyUlBbfk39lcEt5lf
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence