ddf20fb1c244ee235878deee3ec768ef5f06e61ab51f71a61f82bd75858efa9f | Triage

Sharing

General

Target

ef279622a161f62954ebbe9b91ba5c95_JaffaCakes118
Size

1.5MB
Sample

240921-f892fsxbqb
MD5

ef279622a161f62954ebbe9b91ba5c95
SHA1

f76068ca8d89916bc1809cf8e4c42bd3a4682369
SHA256

ddf20fb1c244ee235878deee3ec768ef5f06e61ab51f71a61f82bd75858efa9f
SHA512

d42fea793d94d9a5ad2e70b80cd868cd2e586c2ec0c23ecb455e6048762e7c70c519d8ea2e2ec28759ae9f93c633e734d5c2d75c46a9ce451b4ae9c41cf362e0
SSDEEP

24576:IHuYqkUGXWoItciSTypRtXih60SXeYENQVEYg4o+k7/TBA2JZo:ouYqfGmo7MvhihqXfrg4XsTBXJZo

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef279622a161f62954ebbe9b91ba5c95_JaffaCakes118
- Size
  
  1.5MB
- MD5
  
  ef279622a161f62954ebbe9b91ba5c95
- SHA1
  
  f76068ca8d89916bc1809cf8e4c42bd3a4682369
- SHA256
  
  ddf20fb1c244ee235878deee3ec768ef5f06e61ab51f71a61f82bd75858efa9f
- SHA512
  
  d42fea793d94d9a5ad2e70b80cd868cd2e586c2ec0c23ecb455e6048762e7c70c519d8ea2e2ec28759ae9f93c633e734d5c2d75c46a9ce451b4ae9c41cf362e0
- SSDEEP
  
  24576:IHuYqkUGXWoItciSTypRtXih60SXeYENQVEYg4o+k7/TBA2JZo:ouYqfGmo7MvhihqXfrg4XsTBXJZo
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2