8ef53e8e6a5c6a24fefb036d788b755630073c0964ba8dd5aeb7cbcca68fd87f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb5436b384a6040996c87e9b73348efc_JaffaCakes118
Size

107KB
Sample

240919-plsnbsyelj
MD5

eb5436b384a6040996c87e9b73348efc
SHA1

ef2d34fa780cbfe0ec18c7699fa96c7f2cf20b65
SHA256

8ef53e8e6a5c6a24fefb036d788b755630073c0964ba8dd5aeb7cbcca68fd87f
SHA512

685d0499e4f4f806eca622dac0bfe1875781933e0a0b07c7fbf1ab3564a2efa8435905f7af84d8488c9322d65c34feb3c49b759092a712051186f0f3d1836ef9
SSDEEP

1536:3bkSEYgThLRREWXlsev2AIMmy4ayMIQuic/twSq7CosbAPlCmf4a3atRsd:rkogThL7EWXmeyFyRihOobzmga3atQ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  eb5436b384a6040996c87e9b73348efc_JaffaCakes118
- Size
  
  107KB
- MD5
  
  eb5436b384a6040996c87e9b73348efc
- SHA1
  
  ef2d34fa780cbfe0ec18c7699fa96c7f2cf20b65
- SHA256
  
  8ef53e8e6a5c6a24fefb036d788b755630073c0964ba8dd5aeb7cbcca68fd87f
- SHA512
  
  685d0499e4f4f806eca622dac0bfe1875781933e0a0b07c7fbf1ab3564a2efa8435905f7af84d8488c9322d65c34feb3c49b759092a712051186f0f3d1836ef9
- SSDEEP
  
  1536:3bkSEYgThLRREWXlsev2AIMmy4ayMIQuic/twSq7CosbAPlCmf4a3atRsd:rkogThL7EWXmeyFyRihOobzmga3atQ
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence