aaca56b2cf5bf4b858b9e1ae75406649f0c40b73dace622586409f830e1c3d19 | Triage

Sharing

General

Target

27ffb958a31a43abd7ed176a59fa95ea_JaffaCakes118
Size

573KB
Sample

240706-k3t59swcnc
MD5

27ffb958a31a43abd7ed176a59fa95ea
SHA1

e15385a12ac9248d22883c34594bc549eda38a91
SHA256

aaca56b2cf5bf4b858b9e1ae75406649f0c40b73dace622586409f830e1c3d19
SHA512

cc05a17d16a2b11d0eb098c624b84c5ae2933c9ea5cc745162a9f346b702a94097203af8563b74d8cafe7bdb68154efd7f682bc08f13bd80f5deaa1c54d5c522
SSDEEP

12288:n8aY9721JQE4EJ3sJp1HHVdsoOITy+781/CYzXh6dlU:8agEF/2DHHVdTvT3WvLh

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  27ffb958a31a43abd7ed176a59fa95ea_JaffaCakes118
- Size
  
  573KB
- MD5
  
  27ffb958a31a43abd7ed176a59fa95ea
- SHA1
  
  e15385a12ac9248d22883c34594bc549eda38a91
- SHA256
  
  aaca56b2cf5bf4b858b9e1ae75406649f0c40b73dace622586409f830e1c3d19
- SHA512
  
  cc05a17d16a2b11d0eb098c624b84c5ae2933c9ea5cc745162a9f346b702a94097203af8563b74d8cafe7bdb68154efd7f682bc08f13bd80f5deaa1c54d5c522
- SSDEEP
  
  12288:n8aY9721JQE4EJ3sJp1HHVdsoOITy+781/CYzXh6dlU:8agEF/2DHHVdTvT3WvLh
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2