f60d0a378a482bde674b1e5d610bd8d3926468f59ced75e4d29776d14fa4c543 | Triage

Sharing

General

Target

ea79e6f3a96671aa051f677679c2bda0_JaffaCakes118
Size

2KB
Sample

240409-vjrwxage3v
MD5

ea79e6f3a96671aa051f677679c2bda0
SHA1

2e2f085e81e8e750da43d8217541404ab78461e9
SHA256

f60d0a378a482bde674b1e5d610bd8d3926468f59ced75e4d29776d14fa4c543
SHA512

ce1a0f0c3c233a3bfa2724961e9f0f4ae2b061a60560ec37f0acfabad931c6a5a13ae2477d363e855f586fb5e097d5a33c464e57fb8ab06641ac67afcff58fce

Score

7^/10

linux persistence

Malware Config

Targets

- Target
  
  ea79e6f3a96671aa051f677679c2bda0_JaffaCakes118
- Size
  
  2KB
- MD5
  
  ea79e6f3a96671aa051f677679c2bda0
- SHA1
  
  2e2f085e81e8e750da43d8217541404ab78461e9
- SHA256
  
  f60d0a378a482bde674b1e5d610bd8d3926468f59ced75e4d29776d14fa4c543
- SHA512
  
  ce1a0f0c3c233a3bfa2724961e9f0f4ae2b061a60560ec37f0acfabad931c6a5a13ae2477d363e855f586fb5e097d5a33c464e57fb8ab06641ac67afcff58fce
Score

7^/10

persistence
- Executes dropped EXE
- Enumerates running processes
  Discovers information about currently running processes on the system
- Modifies rc script
  Adding/modifying system rc scripts is a common persistence mechanism.
  persistence
- Reads CPU attributes
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Privilege Escalation

Boot or Logon Autostart Execution

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4