48e13b26377ebd4b2efc221b787b52fa60b64b4f0192198ec3ddef17d27ff569 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d076135f4e0c693c7e328781d20aeb56_JaffaCakes118
Size

32KB
Sample

240906-z1t5taxhpr
MD5

d076135f4e0c693c7e328781d20aeb56
SHA1

bf4d242985dde2b188c33543abe453ef92c5b28d
SHA256

48e13b26377ebd4b2efc221b787b52fa60b64b4f0192198ec3ddef17d27ff569
SHA512

8e2590d586821105f59e6a6a68d14100d69ecf1bdc9899449cdcd790a747de645d209f891528120e20bf59bb4f2d9d33a5654a8d33514fb3eada1beb48e0f3a2
SSDEEP

768:p651z5MkLjKUHaHZN8ogFrrKCLG0g44xVcqZ65:p6DTVHKz0j4x/Z65

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d076135f4e0c693c7e328781d20aeb56_JaffaCakes118
- Size
  
  32KB
- MD5
  
  d076135f4e0c693c7e328781d20aeb56
- SHA1
  
  bf4d242985dde2b188c33543abe453ef92c5b28d
- SHA256
  
  48e13b26377ebd4b2efc221b787b52fa60b64b4f0192198ec3ddef17d27ff569
- SHA512
  
  8e2590d586821105f59e6a6a68d14100d69ecf1bdc9899449cdcd790a747de645d209f891528120e20bf59bb4f2d9d33a5654a8d33514fb3eada1beb48e0f3a2
- SSDEEP
  
  768:p651z5MkLjKUHaHZN8ogFrrKCLG0g44xVcqZ65:p6DTVHKz0j4x/Z65
Score

7^/10

discovery persistence
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence