4119b4045326052faa0f5b4ede712a40991a458bbebfaea7ac162bdf0140cec8 | Triage

Sharing

General

Target

3f786264de9456062e47ee4e97155024_JaffaCakes118
Size

22KB
Sample

240713-am8nlsxdjj
MD5

3f786264de9456062e47ee4e97155024
SHA1

2803d9d90de2f02f704756a032bf02e632f87099
SHA256

4119b4045326052faa0f5b4ede712a40991a458bbebfaea7ac162bdf0140cec8
SHA512

50c02d8da48e19b276c8442074ddb735a96c923e16e073e9dcda9c518d505f52ce825ed160aaf4d918760e66c89205f207481d0bd48b14cf983f1498ec9c99b0
SSDEEP

384:XRnMQZxU7roQuL+1faJUjM+Ulw4kYnJEW04pGhVJs+P79yPyVr5BrWPyjZT3g7:XRMwxCd/1faGjgl/nw+E9PsPyVvrWPyW

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  3f786264de9456062e47ee4e97155024_JaffaCakes118
- Size
  
  22KB
- MD5
  
  3f786264de9456062e47ee4e97155024
- SHA1
  
  2803d9d90de2f02f704756a032bf02e632f87099
- SHA256
  
  4119b4045326052faa0f5b4ede712a40991a458bbebfaea7ac162bdf0140cec8
- SHA512
  
  50c02d8da48e19b276c8442074ddb735a96c923e16e073e9dcda9c518d505f52ce825ed160aaf4d918760e66c89205f207481d0bd48b14cf983f1498ec9c99b0
- SSDEEP
  
  384:XRnMQZxU7roQuL+1faJUjM+Ulw4kYnJEW04pGhVJs+P79yPyVr5BrWPyjZT3g7:XRMwxCd/1faGjgl/nw+E9PsPyVvrWPyW
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2