9b88b7a099f6baf08736671da110c0f8818f49b76084d047dde6842719205d1f | Triage

Sharing

General

Target

835fdef0d790de30bd378772b3df274f_JaffaCakes118
Size

294KB
Sample

240802-hbk26swbjb
MD5

835fdef0d790de30bd378772b3df274f
SHA1

26c6739a4383fd3c63e9ec824983abce5ee69240
SHA256

9b88b7a099f6baf08736671da110c0f8818f49b76084d047dde6842719205d1f
SHA512

e7a53b2c4072bc9c4ee5bb861d9895f0df0245f1a13fb886359b37f70a18c909ec59e1b4cbfc92cd95cce870b74c0ec17be15eab1e095d223cad45bf5f67a676
SSDEEP

6144:ogOMMB7FAFJh6ydWE5h9wGajkc9Yw++MXZBB8alTRTLsdJ:o8q7FAsyD5kGa7DMJBBj3XsdJ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  835fdef0d790de30bd378772b3df274f_JaffaCakes118
- Size
  
  294KB
- MD5
  
  835fdef0d790de30bd378772b3df274f
- SHA1
  
  26c6739a4383fd3c63e9ec824983abce5ee69240
- SHA256
  
  9b88b7a099f6baf08736671da110c0f8818f49b76084d047dde6842719205d1f
- SHA512
  
  e7a53b2c4072bc9c4ee5bb861d9895f0df0245f1a13fb886359b37f70a18c909ec59e1b4cbfc92cd95cce870b74c0ec17be15eab1e095d223cad45bf5f67a676
- SSDEEP
  
  6144:ogOMMB7FAFJh6ydWE5h9wGajkc9Yw++MXZBB8alTRTLsdJ:o8q7FAsyD5kGa7DMJBBj3XsdJ
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2