2c0c189df816b6e3887d7b3575b13914b0e219d2cf900b9fdeaea6786f0818e0 | Triage

Sharing

General

Target

099b8474af96f26b8e114c176f7f6b23_JaffaCakes118
Size

120KB
Sample

240624-t1rrsssakc
MD5

099b8474af96f26b8e114c176f7f6b23
SHA1

2045d9ca09ca5a7a04af12244b63862a80479a18
SHA256

2c0c189df816b6e3887d7b3575b13914b0e219d2cf900b9fdeaea6786f0818e0
SHA512

a74c0287cd640ad6ac13f1e8257d17e36eb4835a55546fb79f3deb743ba6e82ef811736cca8db49c0c2c14563374e2f363ad056fecf17bf3d9092e9de4855051
SSDEEP

3072:0/uqwf9se/JUkxRWySst8CojxrdQU9ss:0/uxfOCuQROstGxrdV9

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  099b8474af96f26b8e114c176f7f6b23_JaffaCakes118
- Size
  
  120KB
- MD5
  
  099b8474af96f26b8e114c176f7f6b23
- SHA1
  
  2045d9ca09ca5a7a04af12244b63862a80479a18
- SHA256
  
  2c0c189df816b6e3887d7b3575b13914b0e219d2cf900b9fdeaea6786f0818e0
- SHA512
  
  a74c0287cd640ad6ac13f1e8257d17e36eb4835a55546fb79f3deb743ba6e82ef811736cca8db49c0c2c14563374e2f363ad056fecf17bf3d9092e9de4855051
- SSDEEP
  
  3072:0/uqwf9se/JUkxRWySst8CojxrdQU9ss:0/uxfOCuQROstGxrdV9
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2