1d0443bc9c6fb4fd9a87a87f325b1f6ee3967baed56e324908f83452c4637daf | Triage

Sharing

General

Target

a673dd6b1d7a5463c5f809dfb0bd5b41_JaffaCakes118
Size

243KB
Sample

240818-mnt8tsserq
MD5

a673dd6b1d7a5463c5f809dfb0bd5b41
SHA1

73e9edc0c0c5b0c391adb760de1f6299024973cb
SHA256

1d0443bc9c6fb4fd9a87a87f325b1f6ee3967baed56e324908f83452c4637daf
SHA512

f8ccffab049aed7cc13124e2e096ed9f57be4c310b72fc7b8814eab2523d14c7e175e25668c6aeef147762691831d80ca0fa985a39d5943c299dc907c212b478
SSDEEP

6144:inScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:2TKCS2sjWC1rfd/Rtqc7HqkYh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a673dd6b1d7a5463c5f809dfb0bd5b41_JaffaCakes118
- Size
  
  243KB
- MD5
  
  a673dd6b1d7a5463c5f809dfb0bd5b41
- SHA1
  
  73e9edc0c0c5b0c391adb760de1f6299024973cb
- SHA256
  
  1d0443bc9c6fb4fd9a87a87f325b1f6ee3967baed56e324908f83452c4637daf
- SHA512
  
  f8ccffab049aed7cc13124e2e096ed9f57be4c310b72fc7b8814eab2523d14c7e175e25668c6aeef147762691831d80ca0fa985a39d5943c299dc907c212b478
- SSDEEP
  
  6144:inScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:2TKCS2sjWC1rfd/Rtqc7HqkYh
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2