1f18c287e3707255f2fc50915407b27c4636de7301a5eb7de6120684e0a19b46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8402784cb27fca3262dbc35c9e51888_JaffaCakes118
Size

106KB
Sample

240829-fh67wavbkh
MD5

c8402784cb27fca3262dbc35c9e51888
SHA1

2f9395fc254b5caad16d4deaf75f2721c6ec0bbf
SHA256

1f18c287e3707255f2fc50915407b27c4636de7301a5eb7de6120684e0a19b46
SHA512

072335a63a9cb81f87d2b430a5133982de0e08bc08e52ade057a31dd29138949c7e284ed174c9a29e0a2c934cce24aeae9165b89f764a7f98e18e685ccb1c963
SSDEEP

1536:4aiqH1s+kCtrA2UMT0mTFibDKa1XEFyVIHsGu+a9PxPVvowTf7xpY0EPri:51B31bdBob2QX8yOHBu39P1VvowxGHP2

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c8402784cb27fca3262dbc35c9e51888_JaffaCakes118
- Size
  
  106KB
- MD5
  
  c8402784cb27fca3262dbc35c9e51888
- SHA1
  
  2f9395fc254b5caad16d4deaf75f2721c6ec0bbf
- SHA256
  
  1f18c287e3707255f2fc50915407b27c4636de7301a5eb7de6120684e0a19b46
- SHA512
  
  072335a63a9cb81f87d2b430a5133982de0e08bc08e52ade057a31dd29138949c7e284ed174c9a29e0a2c934cce24aeae9165b89f764a7f98e18e685ccb1c963
- SSDEEP
  
  1536:4aiqH1s+kCtrA2UMT0mTFibDKa1XEFyVIHsGu+a9PxPVvowTf7xpY0EPri:51B31bdBob2QX8yOHBu39P1VvowxGHP2
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence