4e7ab00dfe9c5b0aca84d4ad614d54480ce2711583a216ab18cd34852457ee9d | Triage

Sharing

General

Target

0e039c84221339660979df6d93092fc0_JaffaCakes118
Size

81KB
Sample

240625-pbbl3asalm
MD5

0e039c84221339660979df6d93092fc0
SHA1

38fbf889db1ed9342954ab92138f281ac4ebe633
SHA256

4e7ab00dfe9c5b0aca84d4ad614d54480ce2711583a216ab18cd34852457ee9d
SHA512

8437d85adf92ef0bfef685b58e861e7969f7759356ad3d0a5c408dede3c0d78db92a164050fb32b36465f0b8883b3f6492b2f06fa3fcdd183cb9680c3e9839d2
SSDEEP

1536:+IqdQ9qPiEZRSqWQcCMGgUk4444oNCE5vCs0+i1QL2r9S1Ytc:YEqiKRSxk0ES95c

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  0e039c84221339660979df6d93092fc0_JaffaCakes118
- Size
  
  81KB
- MD5
  
  0e039c84221339660979df6d93092fc0
- SHA1
  
  38fbf889db1ed9342954ab92138f281ac4ebe633
- SHA256
  
  4e7ab00dfe9c5b0aca84d4ad614d54480ce2711583a216ab18cd34852457ee9d
- SHA512
  
  8437d85adf92ef0bfef685b58e861e7969f7759356ad3d0a5c408dede3c0d78db92a164050fb32b36465f0b8883b3f6492b2f06fa3fcdd183cb9680c3e9839d2
- SSDEEP
  
  1536:+IqdQ9qPiEZRSqWQcCMGgUk4444oNCE5vCs0+i1QL2r9S1Ytc:YEqiKRSxk0ES95c
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2