9abd13adf6e7dceb54dfbd7f0b081e7dc963df19c9780513549af9c54d557c7c | Triage

Sharing

General

Target

a89826b880492ec2245222da0666cd6d_JaffaCakes118
Size

332KB
Sample

240818-24lc7azene
MD5

a89826b880492ec2245222da0666cd6d
SHA1

d8c1c8151bb2472c8c017916cf1fd95c8011b111
SHA256

9abd13adf6e7dceb54dfbd7f0b081e7dc963df19c9780513549af9c54d557c7c
SHA512

afebb19d801b401d23b4072585b92839d128fc7944fc5683293168903f5ba1fb6dda0f143e4c9b90e6e2e587a8bf94670b349bc6381ae32c658f62983263f5ce
SSDEEP

6144:TamKy7FKSkf6hcYmWkXFmpKHPzAE4pUPXZqKHgIiAqRZw7:Ft7bcYZkX0KvzAUjHgIg

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a89826b880492ec2245222da0666cd6d_JaffaCakes118
- Size
  
  332KB
- MD5
  
  a89826b880492ec2245222da0666cd6d
- SHA1
  
  d8c1c8151bb2472c8c017916cf1fd95c8011b111
- SHA256
  
  9abd13adf6e7dceb54dfbd7f0b081e7dc963df19c9780513549af9c54d557c7c
- SHA512
  
  afebb19d801b401d23b4072585b92839d128fc7944fc5683293168903f5ba1fb6dda0f143e4c9b90e6e2e587a8bf94670b349bc6381ae32c658f62983263f5ce
- SSDEEP
  
  6144:TamKy7FKSkf6hcYmWkXFmpKHPzAE4pUPXZqKHgIiAqRZw7:Ft7bcYZkX0KvzAUjHgIg
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2