34223e331ff1f6ce180369a9edc62fcec229ff9ffd88022c5ed58194d7fa76a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1839c0027df1f215678df01b4ae2a889_JaffaCakes118
Size

252KB
Sample

241006-qemn6svhpj
MD5

1839c0027df1f215678df01b4ae2a889
SHA1

5df7fc4d8e1efbd3f11623904ccefd359325c539
SHA256

34223e331ff1f6ce180369a9edc62fcec229ff9ffd88022c5ed58194d7fa76a7
SHA512

578c622a19cf5f44400b285ac2557a5bf2f2413984190f9eeedc081b3d85b3287e73ee3c0d13fac3261dc7ed57cbfc973399280f9e1ed03322ce71fa0f7c8d7b
SSDEEP

3072:70o9AU2SGa16BrHkKW+h4lOo+151OrrjX2EflnGqkn6FawMbc/c+F/qkOL0z2m9F:7/97vKWQgS1jSmEVzFXMby/q3Gn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  1839c0027df1f215678df01b4ae2a889_JaffaCakes118
- Size
  
  252KB
- MD5
  
  1839c0027df1f215678df01b4ae2a889
- SHA1
  
  5df7fc4d8e1efbd3f11623904ccefd359325c539
- SHA256
  
  34223e331ff1f6ce180369a9edc62fcec229ff9ffd88022c5ed58194d7fa76a7
- SHA512
  
  578c622a19cf5f44400b285ac2557a5bf2f2413984190f9eeedc081b3d85b3287e73ee3c0d13fac3261dc7ed57cbfc973399280f9e1ed03322ce71fa0f7c8d7b
- SSDEEP
  
  3072:70o9AU2SGa16BrHkKW+h4lOo+151OrrjX2EflnGqkn6FawMbc/c+F/qkOL0z2m9F:7/97vKWQgS1jSmEVzFXMby/q3Gn
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2