1580bcb52776d4979de10ecd86c70bf2e6b2dc522c9aa9fb8d7216b9b41722fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8322dbc2ad3e4f3de572cd994b90dae0_JaffaCakes118
Size

25KB
Sample

240802-fpr2jascje
MD5

8322dbc2ad3e4f3de572cd994b90dae0
SHA1

187e6aaf2dd25e8ee0c3f1f1e60911dc7399a494
SHA256

1580bcb52776d4979de10ecd86c70bf2e6b2dc522c9aa9fb8d7216b9b41722fc
SHA512

bf6ecbaeb93a7240e4cf72a11d261c2fedab3216e4a34b966f2849e5462443c4a670a78421837ac6da7a4ef3d1f89e877476613b3a9134fca22e08b0ee747962
SSDEEP

384:9KIoXUw42cp/rfkI3enp+xBH8EX/rctD0IhHGKLvSoCPHj8ttDXobEm+2YC:0I9ucxzTS+xBHTQIqHGEaoCgtZXGEmB

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  8322dbc2ad3e4f3de572cd994b90dae0_JaffaCakes118
- Size
  
  25KB
- MD5
  
  8322dbc2ad3e4f3de572cd994b90dae0
- SHA1
  
  187e6aaf2dd25e8ee0c3f1f1e60911dc7399a494
- SHA256
  
  1580bcb52776d4979de10ecd86c70bf2e6b2dc522c9aa9fb8d7216b9b41722fc
- SHA512
  
  bf6ecbaeb93a7240e4cf72a11d261c2fedab3216e4a34b966f2849e5462443c4a670a78421837ac6da7a4ef3d1f89e877476613b3a9134fca22e08b0ee747962
- SSDEEP
  
  384:9KIoXUw42cp/rfkI3enp+xBH8EX/rctD0IhHGKLvSoCPHj8ttDXobEm+2YC:0I9ucxzTS+xBHTQIqHGEaoCgtZXGEmB
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence