00c9dc061c796622d6c08e51876418c68634f745c5c490e82427c3b2622c3a51 | Triage

Sharing

General

Target

eaac0f8df61397f558603044e7854402_JaffaCakes118
Size

26KB
Sample

240919-f6fd3ashkc
MD5

eaac0f8df61397f558603044e7854402
SHA1

15505c2fd940800dad6fbe6d94966bf4dd2b0a54
SHA256

00c9dc061c796622d6c08e51876418c68634f745c5c490e82427c3b2622c3a51
SHA512

d773a8637db396d6aaf7bffbfdedc81d6fbaf6eb91bbfcdec0cfd6cfa8919f37185d424509fe361b0f082422067bb42d3ee618c675888c0ae60286417cf6ab69
SSDEEP

384:DTVM52t7GO/9AtA1Mw38oDzWK0KE5i81wRYadiMOVp9vwkBAknqvmrBmzvRC:S2nAm38oDzrmv1wWJMOnrPTuv8

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  eaac0f8df61397f558603044e7854402_JaffaCakes118
- Size
  
  26KB
- MD5
  
  eaac0f8df61397f558603044e7854402
- SHA1
  
  15505c2fd940800dad6fbe6d94966bf4dd2b0a54
- SHA256
  
  00c9dc061c796622d6c08e51876418c68634f745c5c490e82427c3b2622c3a51
- SHA512
  
  d773a8637db396d6aaf7bffbfdedc81d6fbaf6eb91bbfcdec0cfd6cfa8919f37185d424509fe361b0f082422067bb42d3ee618c675888c0ae60286417cf6ab69
- SSDEEP
  
  384:DTVM52t7GO/9AtA1Mw38oDzWK0KE5i81wRYadiMOVp9vwkBAknqvmrBmzvRC:S2nAm38oDzrmv1wWJMOnrPTuv8
Score

6^/10

discovery persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2