b5f7f6d1de414913d243fc537107b6d8aefdbcf2c5622dbd0114ab153976620b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09034a3cae629f80616c2e1df6b00424_JaffaCakes118
Size

68KB
Sample

240624-rmpn6swepb
MD5

09034a3cae629f80616c2e1df6b00424
SHA1

22868cd98b4d0505eac2c08ecc3b5072c82df27f
SHA256

b5f7f6d1de414913d243fc537107b6d8aefdbcf2c5622dbd0114ab153976620b
SHA512

bbdc275abb40500150a5317cc2b036a04494f8ecb9b9daefe73241cb6855ec296ee1c462aecdc2f1458d098cd6c94f4abf6a896b26bb7cfd03407a354f11fcfb
SSDEEP

1536:FNxU+W+73uSpoo3e/8+dcr2yS7yt0xzSjDqdiT:NU+W+qNo3e9Sy/K883T

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  09034a3cae629f80616c2e1df6b00424_JaffaCakes118
- Size
  
  68KB
- MD5
  
  09034a3cae629f80616c2e1df6b00424
- SHA1
  
  22868cd98b4d0505eac2c08ecc3b5072c82df27f
- SHA256
  
  b5f7f6d1de414913d243fc537107b6d8aefdbcf2c5622dbd0114ab153976620b
- SHA512
  
  bbdc275abb40500150a5317cc2b036a04494f8ecb9b9daefe73241cb6855ec296ee1c462aecdc2f1458d098cd6c94f4abf6a896b26bb7cfd03407a354f11fcfb
- SSDEEP
  
  1536:FNxU+W+73uSpoo3e/8+dcr2yS7yt0xzSjDqdiT:NU+W+qNo3e9Sy/K883T
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2