6d904ae6426bc4b041f3232ab72fb25fec1216cf5756db958558632f7978daf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1000157c922995d0a959a76056a689c0_JaffaCakes118
Size

1.6MB
Sample

241003-wn3dwayfqn
MD5

1000157c922995d0a959a76056a689c0
SHA1

ba3f6070111d83165a368c755850c64983109e5a
SHA256

6d904ae6426bc4b041f3232ab72fb25fec1216cf5756db958558632f7978daf5
SHA512

a41f758697c9c8eaeb916c857ddb3705c306854e8cdfc1f3d1efecf5f11b974210040e912fe39e9f36a2f9217cde3a6679b3bdf1f9ab50ada7a6a7ebb2c2c036
SSDEEP

24576:J3O9IuYda4kCiq+t/mz/Za12zo2D3hL9tupTupfJneXHIZ660IEzP:J3O9IuYdaGESo0nUypfJnpcP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  1000157c922995d0a959a76056a689c0_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  1000157c922995d0a959a76056a689c0
- SHA1
  
  ba3f6070111d83165a368c755850c64983109e5a
- SHA256
  
  6d904ae6426bc4b041f3232ab72fb25fec1216cf5756db958558632f7978daf5
- SHA512
  
  a41f758697c9c8eaeb916c857ddb3705c306854e8cdfc1f3d1efecf5f11b974210040e912fe39e9f36a2f9217cde3a6679b3bdf1f9ab50ada7a6a7ebb2c2c036
- SSDEEP
  
  24576:J3O9IuYda4kCiq+t/mz/Za12zo2D3hL9tupTupfJneXHIZ660IEzP:J3O9IuYdaGESo0nUypfJnpcP
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence