8e02cab78b073474317e4bb3e4b87ccbdaec0ba2e3dff9adcf34793b89167ba2 | Triage

Sharing

General

Target

ab4eb02717f95893e37fa9338dae68a7_JaffaCakes118
Size

45KB
Sample

240819-rbsaxs1fnr
MD5

ab4eb02717f95893e37fa9338dae68a7
SHA1

8e919b9e89b56b4dc04369a05520e3cd80c09db8
SHA256

8e02cab78b073474317e4bb3e4b87ccbdaec0ba2e3dff9adcf34793b89167ba2
SHA512

242e9d0989c9f056c53336e44a8cb859d658340652f49c35baf323c48ec261e46d95200f693104c85d322ca238025399ea823cd2c4b791f161e0a1a3e68cf794
SSDEEP

768:2a88PfFrEXy1PSKAYDU0TfBxtdoVvXZgr2RDVzCpE:2HeFrEXy1qkDU09Ovpy4D

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ab4eb02717f95893e37fa9338dae68a7_JaffaCakes118
- Size
  
  45KB
- MD5
  
  ab4eb02717f95893e37fa9338dae68a7
- SHA1
  
  8e919b9e89b56b4dc04369a05520e3cd80c09db8
- SHA256
  
  8e02cab78b073474317e4bb3e4b87ccbdaec0ba2e3dff9adcf34793b89167ba2
- SHA512
  
  242e9d0989c9f056c53336e44a8cb859d658340652f49c35baf323c48ec261e46d95200f693104c85d322ca238025399ea823cd2c4b791f161e0a1a3e68cf794
- SSDEEP
  
  768:2a88PfFrEXy1PSKAYDU0TfBxtdoVvXZgr2RDVzCpE:2HeFrEXy1qkDU09Ovpy4D
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence