6c21122dc7814eb51eecd5aed506a3b0adfb063ab57df1f13df1acc4a384f4e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3813dc69b989ec2a7252ddb75ce61d7_JaffaCakes118
Size

636KB
Sample

240817-v94cmaxhpe
MD5

a3813dc69b989ec2a7252ddb75ce61d7
SHA1

67a402949654647643bf12208713f576ddfcf0ad
SHA256

6c21122dc7814eb51eecd5aed506a3b0adfb063ab57df1f13df1acc4a384f4e9
SHA512

bb61b666131cbcf5ed7c22553fc9f02ba4d1bf7e5fa1073e89aaa8729812b349bf3b329a19a512701f32b27cd7e86ab6c210f1ca13d76cd4a1658583c280c489
SSDEEP

12288:Hw801nd3lKcrk6pB53cJWHZCnF3Z4mxxj7sIcOa/Y91TVKI:Hw801dlKm3cJWHZ+QmXnsINwrI

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a3813dc69b989ec2a7252ddb75ce61d7_JaffaCakes118
- Size
  
  636KB
- MD5
  
  a3813dc69b989ec2a7252ddb75ce61d7
- SHA1
  
  67a402949654647643bf12208713f576ddfcf0ad
- SHA256
  
  6c21122dc7814eb51eecd5aed506a3b0adfb063ab57df1f13df1acc4a384f4e9
- SHA512
  
  bb61b666131cbcf5ed7c22553fc9f02ba4d1bf7e5fa1073e89aaa8729812b349bf3b329a19a512701f32b27cd7e86ab6c210f1ca13d76cd4a1658583c280c489
- SSDEEP
  
  12288:Hw801nd3lKcrk6pB53cJWHZCnF3Z4mxxj7sIcOa/Y91TVKI:Hw801dlKm3cJWHZ+QmXnsINwrI
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence