2dff68623defa4edb64b514ec769e9ff3448b3ae1c0768e784cd305bfce2f91c | Triage

Sharing

General

Target

ff4ead85d03c52f368ba833d9dc58d01_JaffaCakes118
Size

670KB
Sample

240421-pz4yhsbg62
MD5

ff4ead85d03c52f368ba833d9dc58d01
SHA1

4ad6da8977108452584c4bc6191f0d91ad3ff94b
SHA256

2dff68623defa4edb64b514ec769e9ff3448b3ae1c0768e784cd305bfce2f91c
SHA512

f4019d6a7cbdaa5ae66dcee8bd44b13fed9899392030cf189f4a05a6c230188829926b658a75e2bab48635006491db4aceb605ef7ef6b5f81c2cf261aa0fcf9f
SSDEEP

6144:DRD4MlqMABEN37jt9ZA3H8DaLCw0w6LhMA8aF8pVqEDFqf1b/3C:DRZQOrcHwwH6tMzaFg8EDcf1r3C

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  ff4ead85d03c52f368ba833d9dc58d01_JaffaCakes118
- Size
  
  670KB
- MD5
  
  ff4ead85d03c52f368ba833d9dc58d01
- SHA1
  
  4ad6da8977108452584c4bc6191f0d91ad3ff94b
- SHA256
  
  2dff68623defa4edb64b514ec769e9ff3448b3ae1c0768e784cd305bfce2f91c
- SHA512
  
  f4019d6a7cbdaa5ae66dcee8bd44b13fed9899392030cf189f4a05a6c230188829926b658a75e2bab48635006491db4aceb605ef7ef6b5f81c2cf261aa0fcf9f
- SSDEEP
  
  6144:DRD4MlqMABEN37jt9ZA3H8DaLCw0w6LhMA8aF8pVqEDFqf1b/3C:DRZQOrcHwwH6tMzaFg8EDcf1r3C
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2