2ef1069840163d9324ea8c12764b0f9aa9ee6b9d832d0ced37db116d360607e5 | Triage

Sharing

General

Target

69aca624652670cbef9a183fd913c610_JaffaCakes118
Size

48KB
Sample

240724-bevx8ascpf
MD5

69aca624652670cbef9a183fd913c610
SHA1

098a3e7bd5c78a173b71796240bec75518a2c39a
SHA256

2ef1069840163d9324ea8c12764b0f9aa9ee6b9d832d0ced37db116d360607e5
SHA512

d386872ee743c8d2f7e68a96876a779a5d8da4b89e90c629e120e289fc2dedc83e95810c58aaa7ea41adc7692dac4096a96448e086ed78803a3556917f8bdcd8
SSDEEP

768:3PQhg15+lkEogBrxeFVOzDwhe4PvoqhZ2aRVS+YsryFGxLDlV1UN:/Qhg14wWEOzDF4PMaRVS+tGGxT1+

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  69aca624652670cbef9a183fd913c610_JaffaCakes118
- Size
  
  48KB
- MD5
  
  69aca624652670cbef9a183fd913c610
- SHA1
  
  098a3e7bd5c78a173b71796240bec75518a2c39a
- SHA256
  
  2ef1069840163d9324ea8c12764b0f9aa9ee6b9d832d0ced37db116d360607e5
- SHA512
  
  d386872ee743c8d2f7e68a96876a779a5d8da4b89e90c629e120e289fc2dedc83e95810c58aaa7ea41adc7692dac4096a96448e086ed78803a3556917f8bdcd8
- SSDEEP
  
  768:3PQhg15+lkEogBrxeFVOzDwhe4PvoqhZ2aRVS+YsryFGxLDlV1UN:/Qhg14wWEOzDF4PMaRVS+tGGxT1+
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence