bf96f9548caa598c7fec9cc8bf5fccae8ff1ba8f657aa8ff5dcdbeb644df90ee | Triage

Sharing

General

Target

29e2e7ae3c33a586b7f60934a6853c8a_JaffaCakes118
Size

344KB
Sample

240707-ld91vsydkp
MD5

29e2e7ae3c33a586b7f60934a6853c8a
SHA1

f619ae319638602404da5daaf523580172a6b3e1
SHA256

bf96f9548caa598c7fec9cc8bf5fccae8ff1ba8f657aa8ff5dcdbeb644df90ee
SHA512

65fb444888a67bf082bad5bc5bac3d5f6dcba17926374a7c79420ba64d42071f3f96e966f4c0c9f2dfec32eb47dfa2349b51bececfdc71af9dd266940c842463
SSDEEP

6144:N+NRpJgfVnWfF6JPWz3Q1y/NniclL6oaV/fVBqhZ:NcRcflW96tTy/NniclubVB8

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  29e2e7ae3c33a586b7f60934a6853c8a_JaffaCakes118
- Size
  
  344KB
- MD5
  
  29e2e7ae3c33a586b7f60934a6853c8a
- SHA1
  
  f619ae319638602404da5daaf523580172a6b3e1
- SHA256
  
  bf96f9548caa598c7fec9cc8bf5fccae8ff1ba8f657aa8ff5dcdbeb644df90ee
- SHA512
  
  65fb444888a67bf082bad5bc5bac3d5f6dcba17926374a7c79420ba64d42071f3f96e966f4c0c9f2dfec32eb47dfa2349b51bececfdc71af9dd266940c842463
- SSDEEP
  
  6144:N+NRpJgfVnWfF6JPWz3Q1y/NniclL6oaV/fVBqhZ:NcRcflW96tTy/NniclubVB8
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2