18f532cae73cee8472351ee5f82a39348b5040de756e9d0500b185f181a939d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8e68bf6f8371c94d092280fc792d51_JaffaCakes118
Size

368KB
Sample

240404-tf2fhacf42
MD5

bc8e68bf6f8371c94d092280fc792d51
SHA1

884911e5b062d8a557e99a3cc80d38178d4032cf
SHA256

18f532cae73cee8472351ee5f82a39348b5040de756e9d0500b185f181a939d8
SHA512

8e8ec4a66085e95171dd81ab2d9c92f17f3aa1a730cbbd1b06a3939b26247ce3b696b3cfc5b81c59448aefd586f982a19ca68907ad0d8fb5e6767cea64ab5141
SSDEEP

6144:rajdMJyFRe6azHqTGXHaeaEBOcJHFstL1b:E2JylsKTUHkce1

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  bc8e68bf6f8371c94d092280fc792d51_JaffaCakes118
- Size
  
  368KB
- MD5
  
  bc8e68bf6f8371c94d092280fc792d51
- SHA1
  
  884911e5b062d8a557e99a3cc80d38178d4032cf
- SHA256
  
  18f532cae73cee8472351ee5f82a39348b5040de756e9d0500b185f181a939d8
- SHA512
  
  8e8ec4a66085e95171dd81ab2d9c92f17f3aa1a730cbbd1b06a3939b26247ce3b696b3cfc5b81c59448aefd586f982a19ca68907ad0d8fb5e6767cea64ab5141
- SSDEEP
  
  6144:rajdMJyFRe6azHqTGXHaeaEBOcJHFstL1b:E2JylsKTUHkce1
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2