5d204814f6dbc7dd2370c5fce6d33726e5c71f46334ae8a177d0bfc1ab6c9c27 | Triage

Sharing

General

Target

8538a5b14ab4a1eba506891d2ecac7ea_JaffaCakes118
Size

22KB
Sample

240810-hy758azfqj
MD5

8538a5b14ab4a1eba506891d2ecac7ea
SHA1

51d61be16796e4b6dc399c96b11f522141037abb
SHA256

5d204814f6dbc7dd2370c5fce6d33726e5c71f46334ae8a177d0bfc1ab6c9c27
SHA512

6b2fc7f474ec80a49b0c855d6d6ac5e8b9700c0a0e55ba84692007b20f0f21f7b81afdc2adfbf156e781aaa5689c0fa3638498f68f11bd9cb93c52c1598e594c
SSDEEP

384:oTjh0THDrstsBfhVvml1NJ4I97zi8KuTuKkojGCtLkSusLZ5UYoKN+3dhleGXa3G:62DIUYJ4I9fiPwjGCZkyFBolNhFXwi3/

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  8538a5b14ab4a1eba506891d2ecac7ea_JaffaCakes118
- Size
  
  22KB
- MD5
  
  8538a5b14ab4a1eba506891d2ecac7ea
- SHA1
  
  51d61be16796e4b6dc399c96b11f522141037abb
- SHA256
  
  5d204814f6dbc7dd2370c5fce6d33726e5c71f46334ae8a177d0bfc1ab6c9c27
- SHA512
  
  6b2fc7f474ec80a49b0c855d6d6ac5e8b9700c0a0e55ba84692007b20f0f21f7b81afdc2adfbf156e781aaa5689c0fa3638498f68f11bd9cb93c52c1598e594c
- SSDEEP
  
  384:oTjh0THDrstsBfhVvml1NJ4I97zi8KuTuKkojGCtLkSusLZ5UYoKN+3dhleGXa3G:62DIUYJ4I9fiPwjGCZkyFBolNhFXwi3/
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2