e6188fc18e856757b8fc6c8f5c90ca7fdc50955050631d65d30935c60fb64b46 | Triage

Sharing

General

Target

00e483dbf46b3184a0061b8ce37966a8_JaffaCakes118
Size

924KB
Sample

240727-zqcssa1gqf
MD5

00e483dbf46b3184a0061b8ce37966a8
SHA1

bb9300c693647cadb91693a34dd2f743877e73c3
SHA256

e6188fc18e856757b8fc6c8f5c90ca7fdc50955050631d65d30935c60fb64b46
SHA512

fcf00aefa9e2eeaf0a9c066ac4098b8ab4686ad58c75a2d98a4d6a4cfa2ff8328b0863ba8648cbfe2c0d0ffa0f1484e9a79d14a748479e95ab0a2c2d3fdea228
SSDEEP

12288:LqPOYjAmw3w2PnVw33pFow34YKkw3707GFOSxMAxC6tt7JOw3wIdw3w2PnVw33pg:L0OYqPnyYYKGO9qPnyYYKGOF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  00e483dbf46b3184a0061b8ce37966a8_JaffaCakes118
- Size
  
  924KB
- MD5
  
  00e483dbf46b3184a0061b8ce37966a8
- SHA1
  
  bb9300c693647cadb91693a34dd2f743877e73c3
- SHA256
  
  e6188fc18e856757b8fc6c8f5c90ca7fdc50955050631d65d30935c60fb64b46
- SHA512
  
  fcf00aefa9e2eeaf0a9c066ac4098b8ab4686ad58c75a2d98a4d6a4cfa2ff8328b0863ba8648cbfe2c0d0ffa0f1484e9a79d14a748479e95ab0a2c2d3fdea228
- SSDEEP
  
  12288:LqPOYjAmw3w2PnVw33pFow34YKkw3707GFOSxMAxC6tt7JOw3wIdw3w2PnVw33pg:L0OYqPnyYYKGO9qPnyYYKGOF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2