6d7fe09c36c23f7fce53e5016e8c9002bd643615150dfe619619785b43c81db4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70af7398ec4340edb49ef9aff6e02cc2_JaffaCakes118
Size

24KB
Sample

240725-wsz5bayhmf
MD5

70af7398ec4340edb49ef9aff6e02cc2
SHA1

ca851a741669207a755824ac1fe64d6f5f7b8c73
SHA256

6d7fe09c36c23f7fce53e5016e8c9002bd643615150dfe619619785b43c81db4
SHA512

4ca104d5959835c0b7760b2dea693425671be087aa2f767efb91d8767e347475afab482bf79f8654d2cf53b47347ae1e36085af78fea5efd29244e83d2cc1cb4
SSDEEP

384:/Q3l1w+DgYRQ73Qp7BY2qeNNJuQRU9+wjqSNtrr6YHt5/ZbwEDeeddlLdFjpSKFK:cLXjFN7uQeFz/RlJXlxFD/fMSc

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  70af7398ec4340edb49ef9aff6e02cc2_JaffaCakes118
- Size
  
  24KB
- MD5
  
  70af7398ec4340edb49ef9aff6e02cc2
- SHA1
  
  ca851a741669207a755824ac1fe64d6f5f7b8c73
- SHA256
  
  6d7fe09c36c23f7fce53e5016e8c9002bd643615150dfe619619785b43c81db4
- SHA512
  
  4ca104d5959835c0b7760b2dea693425671be087aa2f767efb91d8767e347475afab482bf79f8654d2cf53b47347ae1e36085af78fea5efd29244e83d2cc1cb4
- SSDEEP
  
  384:/Q3l1w+DgYRQ73Qp7BY2qeNNJuQRU9+wjqSNtrr6YHt5/ZbwEDeeddlLdFjpSKFK:cLXjFN7uQeFz/RlJXlxFD/fMSc
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence