62bc38b92cf51417b5b81faea2826e14dbc4c35f261f0dc188eb2011c197edfa | Triage

Sharing

General

Target

eaac3f47971534d745971986aa338578_JaffaCakes118
Size

436KB
Sample

240919-f6spdstbkq
MD5

eaac3f47971534d745971986aa338578
SHA1

4efa059b95c7accf777cbec0d48b6d83b852c2f8
SHA256

62bc38b92cf51417b5b81faea2826e14dbc4c35f261f0dc188eb2011c197edfa
SHA512

074fc09fd0f6b279728fc04a36db5e5f1f0a1f3b11d978eb379289b34604cda07996434f1f897b590f580c4984fd6bac3151ed26ea46dc085ff61c79b3034b4d
SSDEEP

12288:7MSU4joci8M6PW1GVFeFd60DFUyhe3YM:ASUCpM2W1Gvgmye3v

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  eaac3f47971534d745971986aa338578_JaffaCakes118
- Size
  
  436KB
- MD5
  
  eaac3f47971534d745971986aa338578
- SHA1
  
  4efa059b95c7accf777cbec0d48b6d83b852c2f8
- SHA256
  
  62bc38b92cf51417b5b81faea2826e14dbc4c35f261f0dc188eb2011c197edfa
- SHA512
  
  074fc09fd0f6b279728fc04a36db5e5f1f0a1f3b11d978eb379289b34604cda07996434f1f897b590f580c4984fd6bac3151ed26ea46dc085ff61c79b3034b4d
- SSDEEP
  
  12288:7MSU4joci8M6PW1GVFeFd60DFUyhe3YM:ASUCpM2W1Gvgmye3v
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence