857388a3937163bf8c84023b55de56c5d25fc33deaed6a88a67b7b7d9101c403 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72fdae7e7993e1c542c98d36a3780b20_JaffaCakes118
Size

451KB
Sample

240726-hk783awbqc
MD5

72fdae7e7993e1c542c98d36a3780b20
SHA1

c191d9f87e763d58096b9bc16a9945c89839b844
SHA256

857388a3937163bf8c84023b55de56c5d25fc33deaed6a88a67b7b7d9101c403
SHA512

c329bf4197225e8da1c4c90767fdeb49684af7488496214cdeb3b3eee1ba38aa576bfd0a734686a6c1bf2ac90a40dcc452b885db10d9262d2762c813bf701cdb
SSDEEP

3072:7+ZvkWp8qX96QfCDpMqrT4GmdVM3bXKCKk3T1a/PTYhA7Jf22QA6Ivv1tH/nSrNV:aZmqt6Qyiy3b6CR10TY8JOArF9S9x

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  72fdae7e7993e1c542c98d36a3780b20_JaffaCakes118
- Size
  
  451KB
- MD5
  
  72fdae7e7993e1c542c98d36a3780b20
- SHA1
  
  c191d9f87e763d58096b9bc16a9945c89839b844
- SHA256
  
  857388a3937163bf8c84023b55de56c5d25fc33deaed6a88a67b7b7d9101c403
- SHA512
  
  c329bf4197225e8da1c4c90767fdeb49684af7488496214cdeb3b3eee1ba38aa576bfd0a734686a6c1bf2ac90a40dcc452b885db10d9262d2762c813bf701cdb
- SSDEEP
  
  3072:7+ZvkWp8qX96QfCDpMqrT4GmdVM3bXKCKk3T1a/PTYhA7Jf22QA6Ivv1tH/nSrNV:aZmqt6Qyiy3b6CR10TY8JOArF9S9x
Score

7^/10

discovery persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence