befe79f341b8029589422ffd488d33d59522114e17a9b2ccda124a7b10465a03 | Triage

Sharing

General

Target

8881316385376a813c75409c44ba1a3f_JaffaCakes118
Size

63KB
Sample

240811-b33yqsygkq
MD5

8881316385376a813c75409c44ba1a3f
SHA1

e320245a536b9ae3088d80d841e84d699b91f403
SHA256

befe79f341b8029589422ffd488d33d59522114e17a9b2ccda124a7b10465a03
SHA512

e81a7bee05a2a5159e028e6318eb61e678739e8c428ddc61a303db5ee27b5f92f87ee053c61afbaeb4a13322fdbe16435a6b7fdcbfa16a99c09a19c41a7c25c5
SSDEEP

1536:12snHQy73KqOKBiE5lTJwaMHf8rUVialJ5PDCCsx3zG5Xd18gU:12ox3vOUPTJwaM/8mRDtCCsx3qp

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  8881316385376a813c75409c44ba1a3f_JaffaCakes118
- Size
  
  63KB
- MD5
  
  8881316385376a813c75409c44ba1a3f
- SHA1
  
  e320245a536b9ae3088d80d841e84d699b91f403
- SHA256
  
  befe79f341b8029589422ffd488d33d59522114e17a9b2ccda124a7b10465a03
- SHA512
  
  e81a7bee05a2a5159e028e6318eb61e678739e8c428ddc61a303db5ee27b5f92f87ee053c61afbaeb4a13322fdbe16435a6b7fdcbfa16a99c09a19c41a7c25c5
- SSDEEP
  
  1536:12snHQy73KqOKBiE5lTJwaMHf8rUVialJ5PDCCsx3zG5Xd18gU:12ox3vOUPTJwaM/8mRDtCCsx3qp
Score

7^/10

discovery persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence