31e9acb06d860ed25cd58a2fdf78ce9f01d41644cc8b3416468db583c6930ef9 | Triage

Sharing

General

Target

8d3127e5b98efae466b6a83918b1fa78_JaffaCakes118
Size

260KB
Sample

240812-eb4bzayapf
MD5

8d3127e5b98efae466b6a83918b1fa78
SHA1

d2488176598297c4b8141587f55bec2e07286bdc
SHA256

31e9acb06d860ed25cd58a2fdf78ce9f01d41644cc8b3416468db583c6930ef9
SHA512

03c0ea6a70092ce4e785f8a6f6309ee0b1f548d7365c86aa54e06eb034574c525603049149ca1c764e0c70428200c425f9c53c9782919a0bafb002eb67f2fb8e
SSDEEP

3072:lH/Z5GrSgwFvy0kmhqBpPs62TH5PoiMUhwIi5D8sTBinjW5728y0AXqlrErKmzZz:lH/rhvya0DPUHj0I8HBym2Lt0xmzZz

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  8d3127e5b98efae466b6a83918b1fa78_JaffaCakes118
- Size
  
  260KB
- MD5
  
  8d3127e5b98efae466b6a83918b1fa78
- SHA1
  
  d2488176598297c4b8141587f55bec2e07286bdc
- SHA256
  
  31e9acb06d860ed25cd58a2fdf78ce9f01d41644cc8b3416468db583c6930ef9
- SHA512
  
  03c0ea6a70092ce4e785f8a6f6309ee0b1f548d7365c86aa54e06eb034574c525603049149ca1c764e0c70428200c425f9c53c9782919a0bafb002eb67f2fb8e
- SSDEEP
  
  3072:lH/Z5GrSgwFvy0kmhqBpPs62TH5PoiMUhwIi5D8sTBinjW5728y0AXqlrErKmzZz:lH/rhvya0DPUHj0I8HBym2Lt0xmzZz
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence