66dc7207e5826405c21953aca02b97e20b19b9b34f4f2f673321ef5b76ad1e28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d52dbf52bc8e1de03c0d5f385ad452e5_JaffaCakes118
Size

417KB
Sample

240908-14wy9axgkp
MD5

d52dbf52bc8e1de03c0d5f385ad452e5
SHA1

0e3bcf676954ebf650fb57c3367024eedc751e9d
SHA256

66dc7207e5826405c21953aca02b97e20b19b9b34f4f2f673321ef5b76ad1e28
SHA512

ec0ee8a5cad85c6a4d01537181dbfcb4633cd6fdb5a794bc0e492655583528e8d49c5543f2d7010d6f22271ec0cfee075b098d0ed5074bf1b5865ec9d75c7f56
SSDEEP

12288:T3ClbYuGxp2Nx+bj5JVnC04yOarNPT55HpBQFp:TSlbYuGxp2NSjnVnj5OaJPN5HIb

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d52dbf52bc8e1de03c0d5f385ad452e5_JaffaCakes118
- Size
  
  417KB
- MD5
  
  d52dbf52bc8e1de03c0d5f385ad452e5
- SHA1
  
  0e3bcf676954ebf650fb57c3367024eedc751e9d
- SHA256
  
  66dc7207e5826405c21953aca02b97e20b19b9b34f4f2f673321ef5b76ad1e28
- SHA512
  
  ec0ee8a5cad85c6a4d01537181dbfcb4633cd6fdb5a794bc0e492655583528e8d49c5543f2d7010d6f22271ec0cfee075b098d0ed5074bf1b5865ec9d75c7f56
- SSDEEP
  
  12288:T3ClbYuGxp2Nx+bj5JVnC04yOarNPT55HpBQFp:TSlbYuGxp2NSjnVnj5OaJPN5HIb
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2