bc9305362aefae01309bb38865bfa1a56a273902d09c2c511ee8a2901b8b4936 | Triage

Sharing

General

Target

ed9181f7bb47bfd68d6dc3b0c3f92d53_JaffaCakes118
Size

890KB
Sample

240920-pga8gswekq
MD5

ed9181f7bb47bfd68d6dc3b0c3f92d53
SHA1

1e33eaa582abd96c7217bbc757663d41e470c14b
SHA256

bc9305362aefae01309bb38865bfa1a56a273902d09c2c511ee8a2901b8b4936
SHA512

9346c302a27b623b73c17187a97466e09cbb6b52a3ec61aa01aab464c637f201482295566a274fdba9030957f1f946cda9e91236ec1a1520a6584fa14d6592e9
SSDEEP

24576:C+iuXbZK+Jrr186amIWg1RFyIMX5xv+ZXmRE43ss:C+7XbQpJJWgA5X5kxmRR8s

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ed9181f7bb47bfd68d6dc3b0c3f92d53_JaffaCakes118
- Size
  
  890KB
- MD5
  
  ed9181f7bb47bfd68d6dc3b0c3f92d53
- SHA1
  
  1e33eaa582abd96c7217bbc757663d41e470c14b
- SHA256
  
  bc9305362aefae01309bb38865bfa1a56a273902d09c2c511ee8a2901b8b4936
- SHA512
  
  9346c302a27b623b73c17187a97466e09cbb6b52a3ec61aa01aab464c637f201482295566a274fdba9030957f1f946cda9e91236ec1a1520a6584fa14d6592e9
- SSDEEP
  
  24576:C+iuXbZK+Jrr186amIWg1RFyIMX5xv+ZXmRE43ss:C+7XbQpJJWgA5X5kxmRR8s
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence