eb48b212635c3c974e293286a2cc1ad8db6824591c242543e7fa953f4e92a1f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7475375c47ded7bd2e5d129078ea59ba_JaffaCakes118
Size

716KB
Sample

240726-rxea7atdnn
MD5

7475375c47ded7bd2e5d129078ea59ba
SHA1

8094de2dbfb693ed4c59cc59fe7841b8277dc2db
SHA256

eb48b212635c3c974e293286a2cc1ad8db6824591c242543e7fa953f4e92a1f2
SHA512

f81baea46e53d63d1ddb0f8a73dbbbd4a9e4e80dc3b5024992c0fd266228e5c673bf4fef9b0040b74095c09e923068acb3d9dc38fdb557a18ac00e1ec88475e9
SSDEEP

12288:NtKe6Zv23YdqMGHGSX1388BxGVI43GVpinJMcODu5OcQlgv7JZ8fN/UuCPR6yLpA:d6Zv2jbW1SaR7QivMf9APRfLu

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  7475375c47ded7bd2e5d129078ea59ba_JaffaCakes118
- Size
  
  716KB
- MD5
  
  7475375c47ded7bd2e5d129078ea59ba
- SHA1
  
  8094de2dbfb693ed4c59cc59fe7841b8277dc2db
- SHA256
  
  eb48b212635c3c974e293286a2cc1ad8db6824591c242543e7fa953f4e92a1f2
- SHA512
  
  f81baea46e53d63d1ddb0f8a73dbbbd4a9e4e80dc3b5024992c0fd266228e5c673bf4fef9b0040b74095c09e923068acb3d9dc38fdb557a18ac00e1ec88475e9
- SSDEEP
  
  12288:NtKe6Zv23YdqMGHGSX1388BxGVI43GVpinJMcODu5OcQlgv7JZ8fN/UuCPR6yLpA:d6Zv2jbW1SaR7QivMf9APRfLu
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence