5e894d0c79e2fc4f9363ffdcbaeed337c8d9bbed1fded4714b58a6f16b295b30 | Triage

Sharing

General

Target

d0f5ad9449ecad7d1a3f3f8850d2e6d9_JaffaCakes118
Size

153KB
Sample

240907-dr286sself
MD5

d0f5ad9449ecad7d1a3f3f8850d2e6d9
SHA1

fba5b6ac92ad1adbba299fe19c0b0f89c6ec19cf
SHA256

5e894d0c79e2fc4f9363ffdcbaeed337c8d9bbed1fded4714b58a6f16b295b30
SHA512

7d8227cf6f09635b5239d079e1fbd6e740b8a7fc048bc3a290e9005c306c0c43234ee329d52a54164effe3bd5c78a8b0cab90da17cd279dbaf99dd55dd2d3300
SSDEEP

3072:kfJNVAthYInlmX+mS3STOOWAHGhc6CdRah4g:ONVAthvQS3GOOWAHU3C/ay

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0f5ad9449ecad7d1a3f3f8850d2e6d9_JaffaCakes118
- Size
  
  153KB
- MD5
  
  d0f5ad9449ecad7d1a3f3f8850d2e6d9
- SHA1
  
  fba5b6ac92ad1adbba299fe19c0b0f89c6ec19cf
- SHA256
  
  5e894d0c79e2fc4f9363ffdcbaeed337c8d9bbed1fded4714b58a6f16b295b30
- SHA512
  
  7d8227cf6f09635b5239d079e1fbd6e740b8a7fc048bc3a290e9005c306c0c43234ee329d52a54164effe3bd5c78a8b0cab90da17cd279dbaf99dd55dd2d3300
- SSDEEP
  
  3072:kfJNVAthYInlmX+mS3STOOWAHGhc6CdRah4g:ONVAthvQS3GOOWAHU3C/ay
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence