567d9fa6734d03441ed748128ab70c35bf151205f12aed42b56468b7b0c6a43e | Triage

Sharing

General

Target

879a7c39eeef6fd0a241bdeda81eb37d_JaffaCakes118
Size

510KB
Sample

240810-zhdp4s1flh
MD5

879a7c39eeef6fd0a241bdeda81eb37d
SHA1

13361f0fb1abb251ddd6316433c2f4a483eb80ff
SHA256

567d9fa6734d03441ed748128ab70c35bf151205f12aed42b56468b7b0c6a43e
SHA512

7f13766192c62cd73edc664e3a4b0a7d97a45bd33be4cb7f94aff5fce072fe561bae987156dbb7207fbe7e149f7cf480cf7a37368d012a12048aae301b2e9d55
SSDEEP

12288:DC2fxppL34zEY0zYBMjrW5o0RdYOua+t70q:/fJgH0zYy+o0wra+B/

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  879a7c39eeef6fd0a241bdeda81eb37d_JaffaCakes118
- Size
  
  510KB
- MD5
  
  879a7c39eeef6fd0a241bdeda81eb37d
- SHA1
  
  13361f0fb1abb251ddd6316433c2f4a483eb80ff
- SHA256
  
  567d9fa6734d03441ed748128ab70c35bf151205f12aed42b56468b7b0c6a43e
- SHA512
  
  7f13766192c62cd73edc664e3a4b0a7d97a45bd33be4cb7f94aff5fce072fe561bae987156dbb7207fbe7e149f7cf480cf7a37368d012a12048aae301b2e9d55
- SSDEEP
  
  12288:DC2fxppL34zEY0zYBMjrW5o0RdYOua+t70q:/fJgH0zYy+o0wra+B/
Score

7^/10

discovery persistence
- Drops startup file
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence