ced8ef0467315d3fa3ed4b2ae864c9387d9ff6d70446a966af0b8fe85b217376 | Triage

Sharing

General

Target

96475d679cc3df6c296b4474016faf7a_JaffaCakes118
Size

204KB
Sample

240814-qnth3syhpk
MD5

96475d679cc3df6c296b4474016faf7a
SHA1

d0ade86016f2dd9cf88b97ddfa99084325ed3a2f
SHA256

ced8ef0467315d3fa3ed4b2ae864c9387d9ff6d70446a966af0b8fe85b217376
SHA512

9015d6b638173c333163f5868b976e6f55caddcd21bf0fd9a615952559e90f1b5b3ead318e5949f52dbc34a782be3981b9a3565f51efcc20ef3b8ec30f372f6e
SSDEEP

6144:JflNsD4EgQ/wlY0xVycfDyqMiRhxDzZpQ8SaNctTZaxdfZY:J4fgQSzPhHHu5aeaxhZY

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  96475d679cc3df6c296b4474016faf7a_JaffaCakes118
- Size
  
  204KB
- MD5
  
  96475d679cc3df6c296b4474016faf7a
- SHA1
  
  d0ade86016f2dd9cf88b97ddfa99084325ed3a2f
- SHA256
  
  ced8ef0467315d3fa3ed4b2ae864c9387d9ff6d70446a966af0b8fe85b217376
- SHA512
  
  9015d6b638173c333163f5868b976e6f55caddcd21bf0fd9a615952559e90f1b5b3ead318e5949f52dbc34a782be3981b9a3565f51efcc20ef3b8ec30f372f6e
- SSDEEP
  
  6144:JflNsD4EgQ/wlY0xVycfDyqMiRhxDzZpQ8SaNctTZaxdfZY:J4fgQSzPhHHu5aeaxhZY
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2