909bc47fc75fbeaa574625e57ed07f7a2a099f7e16f458b7e6de170d2095f892 | Triage

Sharing

General

Target

261e865a0baacb81fb2f85522d18ba92_JaffaCakes118
Size

24KB
Sample

241008-1yp9hsvhpf
MD5

261e865a0baacb81fb2f85522d18ba92
SHA1

57fc51fd46b2eb7fb6eede85aa98aa89e56d661f
SHA256

909bc47fc75fbeaa574625e57ed07f7a2a099f7e16f458b7e6de170d2095f892
SHA512

10997b65930d249ae70ff5de6eebdb314e9c08528db324ef6924be1f2f1bc54e8cd0b9e4e25b7441456b487bd7965cdc35fc87e922ad4c75c00903e1b6a7f0c2
SSDEEP

384:KjtgNppp8gf6HJZx6dhsYteY0XcLBxwpODcvh:K4DUgswbdqVZ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  261e865a0baacb81fb2f85522d18ba92_JaffaCakes118
- Size
  
  24KB
- MD5
  
  261e865a0baacb81fb2f85522d18ba92
- SHA1
  
  57fc51fd46b2eb7fb6eede85aa98aa89e56d661f
- SHA256
  
  909bc47fc75fbeaa574625e57ed07f7a2a099f7e16f458b7e6de170d2095f892
- SHA512
  
  10997b65930d249ae70ff5de6eebdb314e9c08528db324ef6924be1f2f1bc54e8cd0b9e4e25b7441456b487bd7965cdc35fc87e922ad4c75c00903e1b6a7f0c2
- SSDEEP
  
  384:KjtgNppp8gf6HJZx6dhsYteY0XcLBxwpODcvh:K4DUgswbdqVZ
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2