97fa16c0e60ac6685412fc705e6a2dea33be89b1d3b999b5e675741a9f27bb32 | Triage

Sharing

General

Target

0497546b77d039b398f1862b6054bd44_JaffaCakes118
Size

321KB
Sample

240728-bl6cjaserb
MD5

0497546b77d039b398f1862b6054bd44
SHA1

e2818e53821d7e80a01cb87adeb1915ee29ddaa8
SHA256

97fa16c0e60ac6685412fc705e6a2dea33be89b1d3b999b5e675741a9f27bb32
SHA512

7cae6b064f6530643dbc2ca6d7706bd3c8704440362ce3baa97fd6520420bdbd256e85ea2b866a2266a4c29ad0b40e52ec4be0e2842a696cea167dff9e343f83
SSDEEP

6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJAq:rqpNtb1YIp9AI4FAq

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0497546b77d039b398f1862b6054bd44_JaffaCakes118
- Size
  
  321KB
- MD5
  
  0497546b77d039b398f1862b6054bd44
- SHA1
  
  e2818e53821d7e80a01cb87adeb1915ee29ddaa8
- SHA256
  
  97fa16c0e60ac6685412fc705e6a2dea33be89b1d3b999b5e675741a9f27bb32
- SHA512
  
  7cae6b064f6530643dbc2ca6d7706bd3c8704440362ce3baa97fd6520420bdbd256e85ea2b866a2266a4c29ad0b40e52ec4be0e2842a696cea167dff9e343f83
- SSDEEP
  
  6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJAq:rqpNtb1YIp9AI4FAq
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence