b97223c7d9d8b02c0fa011439ac8c7f49eac7f3c484b9a86162612979fb1e841 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d7f9ec8570f6551209cb1fdba730a7c_JaffaCakes118
Size

49KB
Sample

241013-dr9m9awfph
MD5

3d7f9ec8570f6551209cb1fdba730a7c
SHA1

bff93484ad3193846768876891824eaeca8a29ab
SHA256

b97223c7d9d8b02c0fa011439ac8c7f49eac7f3c484b9a86162612979fb1e841
SHA512

2ab2c321e9d110863bce10bbe80998cd02592d83333d3332835d22f2a79dd1418d5a3dd08a3cff922a1e47428e8a5abc9014940913fa70fbb352ccb51add0aed
SSDEEP

768:syUqhmQIIsDjzvsSCnYR/mpAQ61hctOBx7hmfey6d6k7W1CBQmW3lZ:rUqhmQrkYpnYRmG6CxVmGy6dfSx

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  3d7f9ec8570f6551209cb1fdba730a7c_JaffaCakes118
- Size
  
  49KB
- MD5
  
  3d7f9ec8570f6551209cb1fdba730a7c
- SHA1
  
  bff93484ad3193846768876891824eaeca8a29ab
- SHA256
  
  b97223c7d9d8b02c0fa011439ac8c7f49eac7f3c484b9a86162612979fb1e841
- SHA512
  
  2ab2c321e9d110863bce10bbe80998cd02592d83333d3332835d22f2a79dd1418d5a3dd08a3cff922a1e47428e8a5abc9014940913fa70fbb352ccb51add0aed
- SSDEEP
  
  768:syUqhmQIIsDjzvsSCnYR/mpAQ61hctOBx7hmfey6d6k7W1CBQmW3lZ:rUqhmQrkYpnYRmG6CxVmGy6dfSx
Score

6^/10

discovery persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence