43e9fa6a581aa00c9f55ee4357ae80b5ca309dc36407a12941ac0dc468d83926 | Triage

Sharing

General

Target

82efc524c9b5be7b1ddfba4165820b5b_JaffaCakes118
Size

808KB
Sample

240802-eg85eavclq
MD5

82efc524c9b5be7b1ddfba4165820b5b
SHA1

8ff1d425dd2b97a59caa883d889c008cece8b009
SHA256

43e9fa6a581aa00c9f55ee4357ae80b5ca309dc36407a12941ac0dc468d83926
SHA512

6b06ee5bc2d34fec14841a8cfa8650bc5bfdd7ff3e909de75b2d1de65c909a761088a9ef064d238890af9f5d949efa7fc185102e6655622cc633b032146e2b4c
SSDEEP

12288:HupeaDQxIrv7qzt0Z81rNiKIe3tJkWZr8ygTfLDbnjDznl8mwV2:HACUqRL14K9JZoFfrnjDDt8

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  82efc524c9b5be7b1ddfba4165820b5b_JaffaCakes118
- Size
  
  808KB
- MD5
  
  82efc524c9b5be7b1ddfba4165820b5b
- SHA1
  
  8ff1d425dd2b97a59caa883d889c008cece8b009
- SHA256
  
  43e9fa6a581aa00c9f55ee4357ae80b5ca309dc36407a12941ac0dc468d83926
- SHA512
  
  6b06ee5bc2d34fec14841a8cfa8650bc5bfdd7ff3e909de75b2d1de65c909a761088a9ef064d238890af9f5d949efa7fc185102e6655622cc633b032146e2b4c
- SSDEEP
  
  12288:HupeaDQxIrv7qzt0Z81rNiKIe3tJkWZr8ygTfLDbnjDznl8mwV2:HACUqRL14K9JZoFfrnjDDt8
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence