5a327615ec9537e76cc24f531410c2a178ceb51f7f53b21bc50dd178629c037b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a089db7e50ea046b417e03c1dfe3d898_JaffaCakes118
Size

98KB
Sample

240817-awfdeszemj
MD5

a089db7e50ea046b417e03c1dfe3d898
SHA1

32fcc304139c534e3ac4f5d63226cb83400eebda
SHA256

5a327615ec9537e76cc24f531410c2a178ceb51f7f53b21bc50dd178629c037b
SHA512

57937da6fad0a22efd60d5ccf90f6bdc2f7540b99ae7ed916f1e53fc623adbb2af9f54ce8b51d4bc68ff8ea9e08f9b07e326d237b9c831fdf8ef6b5b71773211
SSDEEP

1536:38mqLtshOtqbm4QcE8e/fGe8QHrvOjxYv4dk6Hd6twQamU1SeFAATP1:szJtqbA/GebvtvIk4QxU1SeF79

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a089db7e50ea046b417e03c1dfe3d898_JaffaCakes118
- Size
  
  98KB
- MD5
  
  a089db7e50ea046b417e03c1dfe3d898
- SHA1
  
  32fcc304139c534e3ac4f5d63226cb83400eebda
- SHA256
  
  5a327615ec9537e76cc24f531410c2a178ceb51f7f53b21bc50dd178629c037b
- SHA512
  
  57937da6fad0a22efd60d5ccf90f6bdc2f7540b99ae7ed916f1e53fc623adbb2af9f54ce8b51d4bc68ff8ea9e08f9b07e326d237b9c831fdf8ef6b5b71773211
- SSDEEP
  
  1536:38mqLtshOtqbm4QcE8e/fGe8QHrvOjxYv4dk6Hd6twQamU1SeFAATP1:szJtqbA/GebvtvIk4QxU1SeF79
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2