0c1e0d8fa09597e5365573dd292a2ca9de13a34acbdd22d649ab0b44fa85266e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9429d3f65e8f266deee98d9611cd15f5_JaffaCakes118
Size

88KB
Sample

240813-wnn69ashpm
MD5

9429d3f65e8f266deee98d9611cd15f5
SHA1

118db293287a9d64cbf0b3681ec342b8b799bc90
SHA256

0c1e0d8fa09597e5365573dd292a2ca9de13a34acbdd22d649ab0b44fa85266e
SHA512

19785230158f9e9b2d6ec3e1a83c8bc2ae3686f388cb0c113100f6993cec7939986611b8bc46aa23b46e85dc6d2382d2c028da6ca3558fc8f7f2d305e29422b0
SSDEEP

1536:g7szc4+8LaII5jrGfndm87c5Alv7j0xtPoWwc4+8LaIJpw:zzc4+8LaII5jrindmGw4v7QxtgWwc4+C

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  9429d3f65e8f266deee98d9611cd15f5_JaffaCakes118
- Size
  
  88KB
- MD5
  
  9429d3f65e8f266deee98d9611cd15f5
- SHA1
  
  118db293287a9d64cbf0b3681ec342b8b799bc90
- SHA256
  
  0c1e0d8fa09597e5365573dd292a2ca9de13a34acbdd22d649ab0b44fa85266e
- SHA512
  
  19785230158f9e9b2d6ec3e1a83c8bc2ae3686f388cb0c113100f6993cec7939986611b8bc46aa23b46e85dc6d2382d2c028da6ca3558fc8f7f2d305e29422b0
- SSDEEP
  
  1536:g7szc4+8LaII5jrGfndm87c5Alv7j0xtPoWwc4+8LaIJpw:zzc4+8LaII5jrindmGw4v7QxtgWwc4+C
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence