ce5588de9ac59746d9bd90f254a46cd4fe41ce485a059ff067983eb4f3206fa9 | Triage

Sharing

General

Target

550f27fb2e2acd1f926c512b5f059803_JaffaCakes118
Size

45KB
Sample

241018-c9sl1ssekh
MD5

550f27fb2e2acd1f926c512b5f059803
SHA1

4ef711520ed90dd12e669b62fd384929929704d4
SHA256

ce5588de9ac59746d9bd90f254a46cd4fe41ce485a059ff067983eb4f3206fa9
SHA512

23122f6f4359f46a13bad262d4b5275eef24500b5ff2f49a6189ff1ece3aa817fad99a57ed3084ccb9f223466292ebffc494c79964a1e99d31168f7e8d4d5a27
SSDEEP

768:xw1md/3gGa+R3v+JeQ2n3GYMOMYNLfS90wLAJSVXcwixHKGpCR:x5qGlRGef1MnYNLELChwiFmR

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  550f27fb2e2acd1f926c512b5f059803_JaffaCakes118
- Size
  
  45KB
- MD5
  
  550f27fb2e2acd1f926c512b5f059803
- SHA1
  
  4ef711520ed90dd12e669b62fd384929929704d4
- SHA256
  
  ce5588de9ac59746d9bd90f254a46cd4fe41ce485a059ff067983eb4f3206fa9
- SHA512
  
  23122f6f4359f46a13bad262d4b5275eef24500b5ff2f49a6189ff1ece3aa817fad99a57ed3084ccb9f223466292ebffc494c79964a1e99d31168f7e8d4d5a27
- SSDEEP
  
  768:xw1md/3gGa+R3v+JeQ2n3GYMOMYNLfS90wLAJSVXcwixHKGpCR:x5qGlRGef1MnYNLELChwiFmR
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2