957192c694a5dd00cf04f2289b8d286952b25b1d668439a84804a0ff1f552a9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1213368877125ae61b0745302acd4b7_JaffaCakes118
Size

24KB
Sample

240820-2lsdsaxblb
MD5

b1213368877125ae61b0745302acd4b7
SHA1

16a252f91813f909c31a562af54037846ddaec38
SHA256

957192c694a5dd00cf04f2289b8d286952b25b1d668439a84804a0ff1f552a9f
SHA512

d0efc554ca8c50131e2e893a37bec42ecbfcff655e1ee46fe166a4b8658a1e03cc621d27d05e773dd9e061a127ff73ccba18d516c78f4151530b8484c58d8d63
SSDEEP

384:KPWijrOFAK9d0hPohB0M9is1sn0/Mcteje6s+m718PasHdez1UKc:K/GFAK9i5sri0TKU7711skp+

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1213368877125ae61b0745302acd4b7_JaffaCakes118
- Size
  
  24KB
- MD5
  
  b1213368877125ae61b0745302acd4b7
- SHA1
  
  16a252f91813f909c31a562af54037846ddaec38
- SHA256
  
  957192c694a5dd00cf04f2289b8d286952b25b1d668439a84804a0ff1f552a9f
- SHA512
  
  d0efc554ca8c50131e2e893a37bec42ecbfcff655e1ee46fe166a4b8658a1e03cc621d27d05e773dd9e061a127ff73ccba18d516c78f4151530b8484c58d8d63
- SSDEEP
  
  384:KPWijrOFAK9d0hPohB0M9is1sn0/Mcteje6s+m718PasHdez1UKc:K/GFAK9i5sri0TKU7711skp+
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2