4d8b73a13fe6dcda03178ff40a9df17b13836077f25f4817e1c1da6d509c3ce2 | Triage

Sharing

General

Target

5f7acfc3f73851f71c57dc8c456f67e9_JaffaCakes118
Size

108KB
Sample

240720-ht3pya1fnm
MD5

5f7acfc3f73851f71c57dc8c456f67e9
SHA1

7473892e888cee4adf18d79f620b03731acde5e9
SHA256

4d8b73a13fe6dcda03178ff40a9df17b13836077f25f4817e1c1da6d509c3ce2
SHA512

21981e92d8e86a3e8364967cc958e577051b008993bf175c4f002a5332a0fb763cb664e3d28197d5eb6520223d67a2bdfdcaa84a091751fe4f30ef835133ccf2
SSDEEP

1536:KGxnN7Og8qXWVCVn/Uy18vjfYw2q1T4F0f:KmhB8qXWm/lNk

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  5f7acfc3f73851f71c57dc8c456f67e9_JaffaCakes118
- Size
  
  108KB
- MD5
  
  5f7acfc3f73851f71c57dc8c456f67e9
- SHA1
  
  7473892e888cee4adf18d79f620b03731acde5e9
- SHA256
  
  4d8b73a13fe6dcda03178ff40a9df17b13836077f25f4817e1c1da6d509c3ce2
- SHA512
  
  21981e92d8e86a3e8364967cc958e577051b008993bf175c4f002a5332a0fb763cb664e3d28197d5eb6520223d67a2bdfdcaa84a091751fe4f30ef835133ccf2
- SSDEEP
  
  1536:KGxnN7Og8qXWVCVn/Uy18vjfYw2q1T4F0f:KmhB8qXWm/lNk
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2