156da8c948a740a8194f946da0a3739b1dad777b8e4477952e7a231e4771f898 | Triage

Sharing

General

Target

56c75f8f1b24357bbaf25c4798a3317b_JaffaCakes118
Size

1020KB
Sample

241018-lwktpazfrc
MD5

56c75f8f1b24357bbaf25c4798a3317b
SHA1

9e7ac0f0178158c05110d3d7a5b2f5aaa4ba8a1f
SHA256

156da8c948a740a8194f946da0a3739b1dad777b8e4477952e7a231e4771f898
SHA512

85809c5e47619878e0ce23409389327e0121624783a9c0c03f22099eb284f85cba595015a65b0871e1fc637e59e99c518b0d644517f94919548fa83bef83f5e4
SSDEEP

24576:PL7LK8xRdsxCv60Bw488SngmlbgwSb91ERrUz5uZ69RH2YjR1pU:POaQxfF8WWPERu1BRI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  56c75f8f1b24357bbaf25c4798a3317b_JaffaCakes118
- Size
  
  1020KB
- MD5
  
  56c75f8f1b24357bbaf25c4798a3317b
- SHA1
  
  9e7ac0f0178158c05110d3d7a5b2f5aaa4ba8a1f
- SHA256
  
  156da8c948a740a8194f946da0a3739b1dad777b8e4477952e7a231e4771f898
- SHA512
  
  85809c5e47619878e0ce23409389327e0121624783a9c0c03f22099eb284f85cba595015a65b0871e1fc637e59e99c518b0d644517f94919548fa83bef83f5e4
- SSDEEP
  
  24576:PL7LK8xRdsxCv60Bw488SngmlbgwSb91ERrUz5uZ69RH2YjR1pU:POaQxfF8WWPERu1BRI
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence