27bf610114fc76d40e719fa579812f74e7c8baba853a09a9bc3891c81c8ca8d3 | Triage

Sharing

General

Target

89c2f4ff9df3acc752d854bd151ee9b5_JaffaCakes118
Size

43KB
Sample

240811-kxzhssxbmh
MD5

89c2f4ff9df3acc752d854bd151ee9b5
SHA1

096af843fa913d807c04f9d4ba168e5d09006cc2
SHA256

27bf610114fc76d40e719fa579812f74e7c8baba853a09a9bc3891c81c8ca8d3
SHA512

3479ef18fd160c1f7710a24610d27a8e489428fb2fe02596b8fac02509c236c603e9b59421064d651f9b9b8843ec2a9235f734956077546d9bf333eaa2cf6fc4
SSDEEP

768:Z7QAs21/Qyf6ryiHtGz+lwWJZMhZXuH3CYzCIoE0HAOSZNuJrrJe:Z1qrryyAQVJZI6mIozH8j0rY

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  89c2f4ff9df3acc752d854bd151ee9b5_JaffaCakes118
- Size
  
  43KB
- MD5
  
  89c2f4ff9df3acc752d854bd151ee9b5
- SHA1
  
  096af843fa913d807c04f9d4ba168e5d09006cc2
- SHA256
  
  27bf610114fc76d40e719fa579812f74e7c8baba853a09a9bc3891c81c8ca8d3
- SHA512
  
  3479ef18fd160c1f7710a24610d27a8e489428fb2fe02596b8fac02509c236c603e9b59421064d651f9b9b8843ec2a9235f734956077546d9bf333eaa2cf6fc4
- SSDEEP
  
  768:Z7QAs21/Qyf6ryiHtGz+lwWJZMhZXuH3CYzCIoE0HAOSZNuJrrJe:Z1qrryyAQVJZI6mIozH8j0rY
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence