c17bd9af66f45c5583587d2e2a989184ff9a94d022fabb109354e333fbfdf45a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5760d82d93cf9701af27d0431fc160_JaffaCakes118
Size

52KB
Sample

241012-wjpl8axfnr
MD5

3b5760d82d93cf9701af27d0431fc160
SHA1

20b82c38ea829d82a4d74f12798b5fc50d2bcaa5
SHA256

c17bd9af66f45c5583587d2e2a989184ff9a94d022fabb109354e333fbfdf45a
SHA512

e45a6daf384046e90d74a382d368fa39e34abb4cc1ac181723b3a1765e9bccf4be10f33702f050f6ee3f579d897458ea61d970e93f72381b3eec73ccac49fae8
SSDEEP

768:ojqaDJwEo/1yh8DB5N7GOfwyeMQ9J9zvWZfIYvc+VxS:o1es85GAwPT6waxS

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  3b5760d82d93cf9701af27d0431fc160_JaffaCakes118
- Size
  
  52KB
- MD5
  
  3b5760d82d93cf9701af27d0431fc160
- SHA1
  
  20b82c38ea829d82a4d74f12798b5fc50d2bcaa5
- SHA256
  
  c17bd9af66f45c5583587d2e2a989184ff9a94d022fabb109354e333fbfdf45a
- SHA512
  
  e45a6daf384046e90d74a382d368fa39e34abb4cc1ac181723b3a1765e9bccf4be10f33702f050f6ee3f579d897458ea61d970e93f72381b3eec73ccac49fae8
- SSDEEP
  
  768:ojqaDJwEo/1yh8DB5N7GOfwyeMQ9J9zvWZfIYvc+VxS:o1es85GAwPT6waxS
Score

6^/10

discovery persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence