235acf4791348eec914df7ef11c4464d75efbf9bb771f5e452c9ba9dcd3ad567 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4818448e7fa2c1a79c52f7a044f9b76_JaffaCakes118
Size

40KB
Sample

240817-23wgrssdmb
MD5

a4818448e7fa2c1a79c52f7a044f9b76
SHA1

9ccc8fae5dbe950c6781feeed2bdd5f8c211edd0
SHA256

235acf4791348eec914df7ef11c4464d75efbf9bb771f5e452c9ba9dcd3ad567
SHA512

73ab50b95542802482f04e3ed7fb74058087fc078bf403f26ebe43fca7763bad9a868844ea769527071f8a66b7cb6475d26a753a8b3f0a47a64ad28a2a65b1b7
SSDEEP

384:/THlxjv2GKD31KDZXW1jfvY/F9fZeX2FfPSSAn9/KxWt7ZGpU+B3D943ljv2GKD:/ZVvkMG5XAc2FnSSAn9/KxfTy5vkMqA

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a4818448e7fa2c1a79c52f7a044f9b76_JaffaCakes118
- Size
  
  40KB
- MD5
  
  a4818448e7fa2c1a79c52f7a044f9b76
- SHA1
  
  9ccc8fae5dbe950c6781feeed2bdd5f8c211edd0
- SHA256
  
  235acf4791348eec914df7ef11c4464d75efbf9bb771f5e452c9ba9dcd3ad567
- SHA512
  
  73ab50b95542802482f04e3ed7fb74058087fc078bf403f26ebe43fca7763bad9a868844ea769527071f8a66b7cb6475d26a753a8b3f0a47a64ad28a2a65b1b7
- SSDEEP
  
  384:/THlxjv2GKD31KDZXW1jfvY/F9fZeX2FfPSSAn9/KxWt7ZGpU+B3D943ljv2GKD:/ZVvkMG5XAc2FnSSAn9/KxfTy5vkMqA
Score

7^/10

discovery persistence
- Drops startup file
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence