504ebae730b0fa7c705ec2bbf9c02bd3cbb5c8e5c90dd6d19095e9ebe9303bd8 | Triage

Sharing

General

Target

9ffe7c08218a1c3eef97a240c9312398_JaffaCakes118
Size

74KB
Sample

240816-z9k89sxhkd
MD5

9ffe7c08218a1c3eef97a240c9312398
SHA1

b8bc78ada75033575779f37eeda542f22cbf0097
SHA256

504ebae730b0fa7c705ec2bbf9c02bd3cbb5c8e5c90dd6d19095e9ebe9303bd8
SHA512

cb9ff5ab4ad3ceec32b8a97fda6ebfe07b7d1d21f3a179d89b701b624d088d0a22161dd4d48b8eed17a4df93ef7080b885163587ceba1f1cd05ab71cb741aa58
SSDEEP

1536:zGMpBSlODZUO0qao3rf2VJ3dn+mb/amoeGn7fkOiLFYTuLn1pM:zGAJ0lmrgJ1+mLamobnuFXn1pM

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9ffe7c08218a1c3eef97a240c9312398_JaffaCakes118
- Size
  
  74KB
- MD5
  
  9ffe7c08218a1c3eef97a240c9312398
- SHA1
  
  b8bc78ada75033575779f37eeda542f22cbf0097
- SHA256
  
  504ebae730b0fa7c705ec2bbf9c02bd3cbb5c8e5c90dd6d19095e9ebe9303bd8
- SHA512
  
  cb9ff5ab4ad3ceec32b8a97fda6ebfe07b7d1d21f3a179d89b701b624d088d0a22161dd4d48b8eed17a4df93ef7080b885163587ceba1f1cd05ab71cb741aa58
- SSDEEP
  
  1536:zGMpBSlODZUO0qao3rf2VJ3dn+mb/amoeGn7fkOiLFYTuLn1pM:zGAJ0lmrgJ1+mLamobnuFXn1pM
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence