be1e62b7dd320e2890cb32270d031349942f1a6dc93bc343f7416ddb86af0b22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59e6cf4e2dcfe9b1c0987114f57d105_JaffaCakes118
Size

51KB
Sample

240818-gh31wsyfla
MD5

a59e6cf4e2dcfe9b1c0987114f57d105
SHA1

58a2bfba78743adc76efe4a4f742f1a77dff2128
SHA256

be1e62b7dd320e2890cb32270d031349942f1a6dc93bc343f7416ddb86af0b22
SHA512

3089444c4e768844b24724de0ae8e020cc3e51f358330da43fbf5e4991fe8eaaaccc079d9953282a6a29adc0408eb6f476496590cfb53b48879a5448142a9d06
SSDEEP

768:XxMfBX8lC5EwUHWmXyjSs/K2WJ8UsPNdBu0yBdF8TBvyBHOo2YZEC:XxiXd5E9PoSoKEX4F8TBvyBuoXR

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a59e6cf4e2dcfe9b1c0987114f57d105_JaffaCakes118
- Size
  
  51KB
- MD5
  
  a59e6cf4e2dcfe9b1c0987114f57d105
- SHA1
  
  58a2bfba78743adc76efe4a4f742f1a77dff2128
- SHA256
  
  be1e62b7dd320e2890cb32270d031349942f1a6dc93bc343f7416ddb86af0b22
- SHA512
  
  3089444c4e768844b24724de0ae8e020cc3e51f358330da43fbf5e4991fe8eaaaccc079d9953282a6a29adc0408eb6f476496590cfb53b48879a5448142a9d06
- SSDEEP
  
  768:XxMfBX8lC5EwUHWmXyjSs/K2WJ8UsPNdBu0yBdF8TBvyBHOo2YZEC:XxiXd5E9PoSoKEX4F8TBvyBuoXR
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence