11d0f47c8e8f616a8be8315ddfdfd4d1f31eab81a59b9e1fd52b6ca7e12309a5 | Triage

Sharing

General

Target

018f359be00d094cb759f57b005522fc_JaffaCakes118
Size

684KB
Sample

240620-ba4dsszdph
MD5

018f359be00d094cb759f57b005522fc
SHA1

8606defcf84597c1b387978b1bc16d9e3df93505
SHA256

11d0f47c8e8f616a8be8315ddfdfd4d1f31eab81a59b9e1fd52b6ca7e12309a5
SHA512

e0543544634c88902e73ffbbca42f0dd12d1dcf1419de86cd2dc6f7bc5ae9abbc23fd51a4daa626e7936022f6a02557cca84314a7c0f4e4c6d3fc5f9abe33907
SSDEEP

12288:F1r8uqoImzSdjXXPAiHfatlxyoiMH+Uy1xb4F3Z4mxxk0MHoTAFbL:F1wuq0SVXIemxyoiiyLUQmXkK8

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  018f359be00d094cb759f57b005522fc_JaffaCakes118
- Size
  
  684KB
- MD5
  
  018f359be00d094cb759f57b005522fc
- SHA1
  
  8606defcf84597c1b387978b1bc16d9e3df93505
- SHA256
  
  11d0f47c8e8f616a8be8315ddfdfd4d1f31eab81a59b9e1fd52b6ca7e12309a5
- SHA512
  
  e0543544634c88902e73ffbbca42f0dd12d1dcf1419de86cd2dc6f7bc5ae9abbc23fd51a4daa626e7936022f6a02557cca84314a7c0f4e4c6d3fc5f9abe33907
- SSDEEP
  
  12288:F1r8uqoImzSdjXXPAiHfatlxyoiMH+Uy1xb4F3Z4mxxk0MHoTAFbL:F1wuq0SVXIemxyoiiyLUQmXkK8
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2