8db5b6670674f8fd57667b1ede98e156cf15470a45b58b72e941880b5241c961 | Triage

Sharing

General

Target

ecc9e066fe1c7b96dfa77f8658baa4f3_JaffaCakes118
Size

1.4MB
Sample

240920-ed1c4axenn
MD5

ecc9e066fe1c7b96dfa77f8658baa4f3
SHA1

1b547f0f8ed95bb001b5cadaec46629d698392db
SHA256

8db5b6670674f8fd57667b1ede98e156cf15470a45b58b72e941880b5241c961
SHA512

b3d8657f322d67a33d83aa19c4902b83435632f61595bf7e785da32680c77190a0f2cf5debdd39a2bf2e1e18645a3ed76bf6b5f1459e6983953ec261a10919c6
SSDEEP

12288:dhh0F8pr5/FIZAAK0/AZNVIUJObD8vXmWDdk0FeVLNg:dhhUIFImAK9C4M6XmjVLN

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ecc9e066fe1c7b96dfa77f8658baa4f3_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  ecc9e066fe1c7b96dfa77f8658baa4f3
- SHA1
  
  1b547f0f8ed95bb001b5cadaec46629d698392db
- SHA256
  
  8db5b6670674f8fd57667b1ede98e156cf15470a45b58b72e941880b5241c961
- SHA512
  
  b3d8657f322d67a33d83aa19c4902b83435632f61595bf7e785da32680c77190a0f2cf5debdd39a2bf2e1e18645a3ed76bf6b5f1459e6983953ec261a10919c6
- SSDEEP
  
  12288:dhh0F8pr5/FIZAAK0/AZNVIUJObD8vXmWDdk0FeVLNg:dhhUIFImAK9C4M6XmjVLN
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence