b44625e970169f7a34afd25f9a9795e1791be02182a439ed878b900b24904c8c | Triage

Sharing

General

Target

856962ee5b939d23ddb235923d0a7421_JaffaCakes118
Size

216KB
Sample

240810-ka77esscjk
MD5

856962ee5b939d23ddb235923d0a7421
SHA1

9076e597489bc29a8ab4f376a3d72e9b98ca401f
SHA256

b44625e970169f7a34afd25f9a9795e1791be02182a439ed878b900b24904c8c
SHA512

051fbaaef3d7780c9a1fa7468f546aedf685e03db90972ba48730c93e903a8ca2addb32c429875ad115fbc7f9a841a4d3075098211617535f40e3d8b608aaea8
SSDEEP

3072:MhegxjXE0R8auQlCxcj0KVPB0Ibz5EixLn/4Vl9F7y2rUQk/VsPl/v1O5lK3uD1h:SJzE/u90SP8Vo2YQk9sPt1SlK+Sax

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  856962ee5b939d23ddb235923d0a7421_JaffaCakes118
- Size
  
  216KB
- MD5
  
  856962ee5b939d23ddb235923d0a7421
- SHA1
  
  9076e597489bc29a8ab4f376a3d72e9b98ca401f
- SHA256
  
  b44625e970169f7a34afd25f9a9795e1791be02182a439ed878b900b24904c8c
- SHA512
  
  051fbaaef3d7780c9a1fa7468f546aedf685e03db90972ba48730c93e903a8ca2addb32c429875ad115fbc7f9a841a4d3075098211617535f40e3d8b608aaea8
- SSDEEP
  
  3072:MhegxjXE0R8auQlCxcj0KVPB0Ibz5EixLn/4Vl9F7y2rUQk/VsPl/v1O5lK3uD1h:SJzE/u90SP8Vo2YQk9sPt1SlK+Sax
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence