0c018f388ca19b4e74c3bfa7a18417236cc3655dba90b1ba6d84e29e0eb8cf49 | Triage

Sharing

General

Target

732c5502097ddad99f0d4158e18cba7d_JaffaCakes118
Size

37KB
Sample

240726-jm8haaydjg
MD5

732c5502097ddad99f0d4158e18cba7d
SHA1

1fa3a0d57b688e3acaec2ead28852405bc560f73
SHA256

0c018f388ca19b4e74c3bfa7a18417236cc3655dba90b1ba6d84e29e0eb8cf49
SHA512

d2cb579280403e27bfa43ee50e568628bde56af787507aecef205b514908fbf02fd1238011e5ac510c493a4bc467e5eaedae3fcddee95cff8d430a01f25854d9
SSDEEP

384:ywkpwmP+4pYw9ZN1ccIxOzdR3G/IvLjsEFFxFyOtmg29/ZCuRjfw:yxwmm4aw9j1eu2wDjsiT7QXhCuRj4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  732c5502097ddad99f0d4158e18cba7d_JaffaCakes118
- Size
  
  37KB
- MD5
  
  732c5502097ddad99f0d4158e18cba7d
- SHA1
  
  1fa3a0d57b688e3acaec2ead28852405bc560f73
- SHA256
  
  0c018f388ca19b4e74c3bfa7a18417236cc3655dba90b1ba6d84e29e0eb8cf49
- SHA512
  
  d2cb579280403e27bfa43ee50e568628bde56af787507aecef205b514908fbf02fd1238011e5ac510c493a4bc467e5eaedae3fcddee95cff8d430a01f25854d9
- SSDEEP
  
  384:ywkpwmP+4pYw9ZN1ccIxOzdR3G/IvLjsEFFxFyOtmg29/ZCuRjfw:yxwmm4aw9j1eu2wDjsiT7QXhCuRj4
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence