886fe08020fb3f89385e6b239ef3856855dbd9163f779e6207ead94888316788 | Triage

Sharing

General

Target

d36ef6f89363e35e0a539090b78cb502_JaffaCakes118
Size

37KB
Sample

240908-d2btzatbqp
MD5

d36ef6f89363e35e0a539090b78cb502
SHA1

9f6b0ca219de76733d870f7d0e5674b8eecf1923
SHA256

886fe08020fb3f89385e6b239ef3856855dbd9163f779e6207ead94888316788
SHA512

ea9a701d963ba375642ecc9141b811795c4e33a3242fc78ae4fde5eb73dc276a779fd2dd5e1527babc1a28e6b63b42b8a025d83004938d115c5ab7c8cc6b142a
SSDEEP

768:iFF+5gto+e6oEg5h9JhggQTjRyJobfftivIF7IjQaUU1yxk89xt:iFMgtexVTggQ0J2ftitZUDka

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d36ef6f89363e35e0a539090b78cb502_JaffaCakes118
- Size
  
  37KB
- MD5
  
  d36ef6f89363e35e0a539090b78cb502
- SHA1
  
  9f6b0ca219de76733d870f7d0e5674b8eecf1923
- SHA256
  
  886fe08020fb3f89385e6b239ef3856855dbd9163f779e6207ead94888316788
- SHA512
  
  ea9a701d963ba375642ecc9141b811795c4e33a3242fc78ae4fde5eb73dc276a779fd2dd5e1527babc1a28e6b63b42b8a025d83004938d115c5ab7c8cc6b142a
- SSDEEP
  
  768:iFF+5gto+e6oEg5h9JhggQTjRyJobfftivIF7IjQaUU1yxk89xt:iFMgtexVTggQ0J2ftitZUDka
Score

6^/10

discovery persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence