54c1072b2b58af39040cf9dd708795c252e0d4e1ae0df8b1541d8fbd6a18afa4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4fddfefdb1ad8814939a16fa776d6b9_JaffaCakes118
Size

690KB
Sample

240818-cmz3kszdmd
MD5

a4fddfefdb1ad8814939a16fa776d6b9
SHA1

f51aea75cb4af09d2ac69e25dfebc97e066ec559
SHA256

54c1072b2b58af39040cf9dd708795c252e0d4e1ae0df8b1541d8fbd6a18afa4
SHA512

321d5075bd62a4067fb4661bdc3654c30fca3fe46259d6d8905a4402b9fc75e2f2becdd3e487d30acbabd1f87a678032600eeed2c8e15cd0c348c523f88cff99
SSDEEP

12288:+e4zZZ3+Yuv5EfJgsHyHkuHNw7m7jQhaMw0atl9F3Z4mxxhzEr/w:hUOV5E7yEuomghb7MfQmXhzErw

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a4fddfefdb1ad8814939a16fa776d6b9_JaffaCakes118
- Size
  
  690KB
- MD5
  
  a4fddfefdb1ad8814939a16fa776d6b9
- SHA1
  
  f51aea75cb4af09d2ac69e25dfebc97e066ec559
- SHA256
  
  54c1072b2b58af39040cf9dd708795c252e0d4e1ae0df8b1541d8fbd6a18afa4
- SHA512
  
  321d5075bd62a4067fb4661bdc3654c30fca3fe46259d6d8905a4402b9fc75e2f2becdd3e487d30acbabd1f87a678032600eeed2c8e15cd0c348c523f88cff99
- SSDEEP
  
  12288:+e4zZZ3+Yuv5EfJgsHyHkuHNw7m7jQhaMw0atl9F3Z4mxxhzEr/w:hUOV5E7yEuomghb7MfQmXhzErw
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence