72c778eb9500c2fd9ff7a55195b540c080441381a56c90ca7d8a1845a7d95501 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c557aea5cf522d1134d389955d2f34e_JaffaCakes118
Size

3KB
Sample

241009-g19w6a1fke
MD5

2c557aea5cf522d1134d389955d2f34e
SHA1

116829e3ff43191e0015885426966fdf7b372de9
SHA256

72c778eb9500c2fd9ff7a55195b540c080441381a56c90ca7d8a1845a7d95501
SHA512

aabf36fd38ab27234c65087d04826dc998b5d907efec9a7a306cb642088c169845c90f0e0ffc0815aca4b4f0a9ce5494cceada4674f0804c51575780fb791c78

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  2c557aea5cf522d1134d389955d2f34e_JaffaCakes118
- Size
  
  3KB
- MD5
  
  2c557aea5cf522d1134d389955d2f34e
- SHA1
  
  116829e3ff43191e0015885426966fdf7b372de9
- SHA256
  
  72c778eb9500c2fd9ff7a55195b540c080441381a56c90ca7d8a1845a7d95501
- SHA512
  
  aabf36fd38ab27234c65087d04826dc998b5d907efec9a7a306cb642088c169845c90f0e0ffc0815aca4b4f0a9ce5494cceada4674f0804c51575780fb791c78
Score

6^/10

discovery persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence