10d2a8c67ed0682d61a1178b3c9f6d021eee72e6444b31749e43feabe990851c | Triage

Sharing

General

Target

4b5c15011162caa9163748758048c8c9_JaffaCakes118
Size

112KB
Sample

240715-zqex5syepj
MD5

4b5c15011162caa9163748758048c8c9
SHA1

283c30de200afb9c607203f9677771e351b8d625
SHA256

10d2a8c67ed0682d61a1178b3c9f6d021eee72e6444b31749e43feabe990851c
SHA512

360f14ecaf1abf528757db896927331be38f9bcdc49cb181d2438f67cb802f63d8630950b2f2791e0ce2a8748b56912ddac015cae614280ac3034907ae342dbc
SSDEEP

1536:95LO7C3P3CO9Lgl9hqC6z7nO14WPjFrJf:95eAP3COafwm1R

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  4b5c15011162caa9163748758048c8c9_JaffaCakes118
- Size
  
  112KB
- MD5
  
  4b5c15011162caa9163748758048c8c9
- SHA1
  
  283c30de200afb9c607203f9677771e351b8d625
- SHA256
  
  10d2a8c67ed0682d61a1178b3c9f6d021eee72e6444b31749e43feabe990851c
- SHA512
  
  360f14ecaf1abf528757db896927331be38f9bcdc49cb181d2438f67cb802f63d8630950b2f2791e0ce2a8748b56912ddac015cae614280ac3034907ae342dbc
- SSDEEP
  
  1536:95LO7C3P3CO9Lgl9hqC6z7nO14WPjFrJf:95eAP3COafwm1R
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2