6663646aa6ab8b4d6468858e7138370ee3e3b7b52e1993636704b6477ba3cc36 | Triage

Sharing

General

Target

9424ac4b86d584795d9d09aa1443b479_JaffaCakes118
Size

77KB
Sample

240813-wkkdwssgkp
MD5

9424ac4b86d584795d9d09aa1443b479
SHA1

8f2a71bbdad32db7c796d8ba07a9c19e853f2bf9
SHA256

6663646aa6ab8b4d6468858e7138370ee3e3b7b52e1993636704b6477ba3cc36
SHA512

39277b4f5caf8455e76d628dc40264e2cf3028ee9160a861c50ab146580d76aff6f615e437a63a7dd1b837cd0a647243870248b179848b78ae50280b13728819
SSDEEP

1536:PJdLac9MFgGxC8cRTFi9AE5G0w/jXjqTwcQ4HBMLD8zbYBxriR+u4:m26JAm50j0sDLD8zs4+u4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9424ac4b86d584795d9d09aa1443b479_JaffaCakes118
- Size
  
  77KB
- MD5
  
  9424ac4b86d584795d9d09aa1443b479
- SHA1
  
  8f2a71bbdad32db7c796d8ba07a9c19e853f2bf9
- SHA256
  
  6663646aa6ab8b4d6468858e7138370ee3e3b7b52e1993636704b6477ba3cc36
- SHA512
  
  39277b4f5caf8455e76d628dc40264e2cf3028ee9160a861c50ab146580d76aff6f615e437a63a7dd1b837cd0a647243870248b179848b78ae50280b13728819
- SSDEEP
  
  1536:PJdLac9MFgGxC8cRTFi9AE5G0w/jXjqTwcQ4HBMLD8zbYBxriR+u4:m26JAm50j0sDLD8zs4+u4
Score

7^/10

discovery persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence