5c7247f78f09ce9b26353ed6b85e31527d6e5f611d832f93890be19c6ebef385 | Triage

Sharing

General

Target

b00166222abb27abaa6e2e49f889f9a1_JaffaCakes118
Size

315KB
Sample

240820-t6gtsawfnk
MD5

b00166222abb27abaa6e2e49f889f9a1
SHA1

a871bb702a454dd6a588e1663108ec6b7b15cabd
SHA256

5c7247f78f09ce9b26353ed6b85e31527d6e5f611d832f93890be19c6ebef385
SHA512

797c3f50f82b0291531328f0d408bce1d12bcd3481312004dced76b21abea1733e934bf77c618860a979afcd546a13854509f1e3545a0c3783c1f313dd01d8a8
SSDEEP

6144:lxUNjKW3dU+5+5DNohNbGTBNl7ZAOsgW5KS4Yf:lxUlKWt9wChNqTDl7Z+KdY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b00166222abb27abaa6e2e49f889f9a1_JaffaCakes118
- Size
  
  315KB
- MD5
  
  b00166222abb27abaa6e2e49f889f9a1
- SHA1
  
  a871bb702a454dd6a588e1663108ec6b7b15cabd
- SHA256
  
  5c7247f78f09ce9b26353ed6b85e31527d6e5f611d832f93890be19c6ebef385
- SHA512
  
  797c3f50f82b0291531328f0d408bce1d12bcd3481312004dced76b21abea1733e934bf77c618860a979afcd546a13854509f1e3545a0c3783c1f313dd01d8a8
- SSDEEP
  
  6144:lxUNjKW3dU+5+5DNohNbGTBNl7ZAOsgW5KS4Yf:lxUlKWt9wChNqTDl7Z+KdY
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence