cd5f0e40fba2d2500c0eae95c313c56e530fa0f118a20682cc66dca1dc367666 | Triage

Sharing

General

Target

3ea6b1dbfe89146e7fa0fdc935af4b2b_JaffaCakes118
Size

124KB
Sample

240712-yjpckazele
MD5

3ea6b1dbfe89146e7fa0fdc935af4b2b
SHA1

a90820150dd19ba9ff2cce95ea738067a08be131
SHA256

cd5f0e40fba2d2500c0eae95c313c56e530fa0f118a20682cc66dca1dc367666
SHA512

67e8a1c4dc3bb9e0ac97f8307d2db33c83e9902b00eb5be1093172604edd50d19bae936d1e37825fe78a6d1a2a3b0177995f8153e4d823c01be0cd5061008e04
SSDEEP

3072:eFZp65wa4mgj+zUGnIKCAu8wDC66hYjBRJPPD+pkoUWhG0r9:yZpmsj9ifPPXhU/JPL+X00

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  3ea6b1dbfe89146e7fa0fdc935af4b2b_JaffaCakes118
- Size
  
  124KB
- MD5
  
  3ea6b1dbfe89146e7fa0fdc935af4b2b
- SHA1
  
  a90820150dd19ba9ff2cce95ea738067a08be131
- SHA256
  
  cd5f0e40fba2d2500c0eae95c313c56e530fa0f118a20682cc66dca1dc367666
- SHA512
  
  67e8a1c4dc3bb9e0ac97f8307d2db33c83e9902b00eb5be1093172604edd50d19bae936d1e37825fe78a6d1a2a3b0177995f8153e4d823c01be0cd5061008e04
- SSDEEP
  
  3072:eFZp65wa4mgj+zUGnIKCAu8wDC66hYjBRJPPD+pkoUWhG0r9:yZpmsj9ifPPXhU/JPL+X00
Score

7^/10

persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2