8289ea68d67514c0688d541697ea5f75465fd1a5a8305c3e56786f90d95e4347 | Triage

Sharing

General

Target

3a275b2ed078c0342f5ca9316436d064_JaffaCakes118
Size

37KB
Sample

240711-weqzgsxdqn
MD5

3a275b2ed078c0342f5ca9316436d064
SHA1

1121cc9f4519aff15a36ddfbfcc0ea85de5e5f4b
SHA256

8289ea68d67514c0688d541697ea5f75465fd1a5a8305c3e56786f90d95e4347
SHA512

1a68aad2635d8a911f12d15cdf5b17ea930e9804ba999e0d33535fa2d3d5ec2efc25fbf62cd149cc88abc94092142f7c64262b8b1ab336e6f5b940dd91e21076
SSDEEP

768:Te+yQkCn+iVuvcU1281Lt/s49giljT44/JkskrbY6ACfHlAxAqKVZ63zY:0Qxn+iVecIL/e450rbYg2tK/x

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3a275b2ed078c0342f5ca9316436d064_JaffaCakes118
- Size
  
  37KB
- MD5
  
  3a275b2ed078c0342f5ca9316436d064
- SHA1
  
  1121cc9f4519aff15a36ddfbfcc0ea85de5e5f4b
- SHA256
  
  8289ea68d67514c0688d541697ea5f75465fd1a5a8305c3e56786f90d95e4347
- SHA512
  
  1a68aad2635d8a911f12d15cdf5b17ea930e9804ba999e0d33535fa2d3d5ec2efc25fbf62cd149cc88abc94092142f7c64262b8b1ab336e6f5b940dd91e21076
- SSDEEP
  
  768:Te+yQkCn+iVuvcU1281Lt/s49giljT44/JkskrbY6ACfHlAxAqKVZ63zY:0Qxn+iVecIL/e450rbYg2tK/x
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2