fa6ef9cca2b51022eaae9fe589fe7a0f95f82ccead5d27ff6eb96a47a8df6815 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118
Size

272KB
Sample

240724-alhqssxamn
MD5

6989b7091eb3300d1ae4099b9f8e515f
SHA1

98a2529f8d2f6f8c86f2bb266d62d268460550d4
SHA256

fa6ef9cca2b51022eaae9fe589fe7a0f95f82ccead5d27ff6eb96a47a8df6815
SHA512

1a68bed87b39a36290653aed74ffb6b1a0bd30d01ae53cd29b79f77be32fda9ed9c41a90c67b0b745524e88b3ef103f7dbd3212a7c527745e1811709ed946673
SSDEEP

6144:pbAwnyp8ZfWuSyss+k3PDOA7U5Tl1L96YG:p7nypVuSyR+kaA7+O

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118
- Size
  
  272KB
- MD5
  
  6989b7091eb3300d1ae4099b9f8e515f
- SHA1
  
  98a2529f8d2f6f8c86f2bb266d62d268460550d4
- SHA256
  
  fa6ef9cca2b51022eaae9fe589fe7a0f95f82ccead5d27ff6eb96a47a8df6815
- SHA512
  
  1a68bed87b39a36290653aed74ffb6b1a0bd30d01ae53cd29b79f77be32fda9ed9c41a90c67b0b745524e88b3ef103f7dbd3212a7c527745e1811709ed946673
- SSDEEP
  
  6144:pbAwnyp8ZfWuSyss+k3PDOA7U5Tl1L96YG:p7nypVuSyR+kaA7+O
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Drops file in Drivers directory
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2