2a120e294551cac925e030f39f976130ab8f1843991896e54c879630c9c8a337 | Triage

Sharing

General

Target

85baaf8ab379979c94d587b28e80c551_JaffaCakes118
Size

995KB
Sample

240810-mlareazcpd
MD5

85baaf8ab379979c94d587b28e80c551
SHA1

ab06b61aedb853918d15ea37ce390d497ff14984
SHA256

2a120e294551cac925e030f39f976130ab8f1843991896e54c879630c9c8a337
SHA512

9d1c26884f0c3efda8dc4cf4e8833cc4a30537c01aafe29bb09622a662a8427bcde6ea620caecef24b7985bd467e3d687d6db5286b0f2db978fa19266b88a0ff
SSDEEP

12288:ykwheHjNf7vRELPeSZLYJs7NNdXm56w4sMaKWPl4cpIz20YCw/ioLWiEazda7EiU:hwKLR4LYJGNJJvaKW4ad/ioay

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  85baaf8ab379979c94d587b28e80c551_JaffaCakes118
- Size
  
  995KB
- MD5
  
  85baaf8ab379979c94d587b28e80c551
- SHA1
  
  ab06b61aedb853918d15ea37ce390d497ff14984
- SHA256
  
  2a120e294551cac925e030f39f976130ab8f1843991896e54c879630c9c8a337
- SHA512
  
  9d1c26884f0c3efda8dc4cf4e8833cc4a30537c01aafe29bb09622a662a8427bcde6ea620caecef24b7985bd467e3d687d6db5286b0f2db978fa19266b88a0ff
- SSDEEP
  
  12288:ykwheHjNf7vRELPeSZLYJs7NNdXm56w4sMaKWPl4cpIz20YCw/ioLWiEazda7EiU:hwKLR4LYJGNJJvaKW4ad/ioay
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence