c98b2589823c4121f2a01845d9863017da7f5e7ca4b7d82de3ceedb9f3fd284e | Triage

Sharing

General

Target

b4f0e994975bff7dfe20011baba4be64_JaffaCakes118
Size

6KB
Sample

241130-fxjp5atqhx
MD5

b4f0e994975bff7dfe20011baba4be64
SHA1

2a46f25dc1773def752911f529bb6599fa9d2036
SHA256

c98b2589823c4121f2a01845d9863017da7f5e7ca4b7d82de3ceedb9f3fd284e
SHA512

7ee627337e2332dddf0018c7bcc2fe84658b66f928a73fe480a0b1e16138b6afd4de75ec04b0137c27969c0c55b22ec8622ad421c7459cb21b9e0d4c44bc8af6
SSDEEP

96:cu+jgv9t6YKhJefCZnMKS68Fp844xmb7KrKks2YvlkjF0/ym9ovuxcTlbMdtWV1T:Hv9ZKhJcI88mfhUQ6x06m9onytVap

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b4f0e994975bff7dfe20011baba4be64_JaffaCakes118
- Size
  
  6KB
- MD5
  
  b4f0e994975bff7dfe20011baba4be64
- SHA1
  
  2a46f25dc1773def752911f529bb6599fa9d2036
- SHA256
  
  c98b2589823c4121f2a01845d9863017da7f5e7ca4b7d82de3ceedb9f3fd284e
- SHA512
  
  7ee627337e2332dddf0018c7bcc2fe84658b66f928a73fe480a0b1e16138b6afd4de75ec04b0137c27969c0c55b22ec8622ad421c7459cb21b9e0d4c44bc8af6
- SSDEEP
  
  96:cu+jgv9t6YKhJefCZnMKS68Fp844xmb7KrKks2YvlkjF0/ym9ovuxcTlbMdtWV1T:Hv9ZKhJcI88mfhUQ6x06m9onytVap
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in Drivers directory
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence