f697072d1cada4d8136e761098e2a7b9c1d76604967cc5397927f1874b833e11 | Triage

Sharing

General

Target

36614bd5646c08cd6318a38f68b6cc90_JaffaCakes118
Size

40KB
Sample

240710-zxqm8azekl
MD5

36614bd5646c08cd6318a38f68b6cc90
SHA1

4b7681cf2ddbd2502cae3ee58fe167f46adb44a4
SHA256

f697072d1cada4d8136e761098e2a7b9c1d76604967cc5397927f1874b833e11
SHA512

c54a9fedc05f1bdad6070864d580474d8e367881f884d468ca31182182f1ada1e7b44b28dabb9a83dd32daf47ef4696415e8a9e75c3b5e15526f0e6d6f768d74
SSDEEP

384:Yo6DXIkXnmyosyHceJL/kl8IvGQzabMNahWpCFuHPPmMrbsAKP:YjD4kXmydZeJL/kt3ahWQ8PmYbsAKP

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  36614bd5646c08cd6318a38f68b6cc90_JaffaCakes118
- Size
  
  40KB
- MD5
  
  36614bd5646c08cd6318a38f68b6cc90
- SHA1
  
  4b7681cf2ddbd2502cae3ee58fe167f46adb44a4
- SHA256
  
  f697072d1cada4d8136e761098e2a7b9c1d76604967cc5397927f1874b833e11
- SHA512
  
  c54a9fedc05f1bdad6070864d580474d8e367881f884d468ca31182182f1ada1e7b44b28dabb9a83dd32daf47ef4696415e8a9e75c3b5e15526f0e6d6f768d74
- SSDEEP
  
  384:Yo6DXIkXnmyosyHceJL/kl8IvGQzabMNahWpCFuHPPmMrbsAKP:YjD4kXmydZeJL/kt3ahWQ8PmYbsAKP
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2