90faf09201883b1c21cd12ee971565d74b56a0485d9e8130666dc51d40ee718f | Triage

Sharing

General

Target

a700f3fa0a5022c8f6e7e8dee63f7980_JaffaCakes118
Size

136KB
Sample

240818-rrj99axepa
MD5

a700f3fa0a5022c8f6e7e8dee63f7980
SHA1

9b7bb5746970f6c19b431c848fdd3412f70d9391
SHA256

90faf09201883b1c21cd12ee971565d74b56a0485d9e8130666dc51d40ee718f
SHA512

e51633b9fec76019134ccc8dc8f57928b5659a61c86079f2096ef0361b61961f35f4e6bedd205b6a3478996e67860e4abb50fee8c7edfb9c5df68ad777541ee2
SSDEEP

3072:h/B/FFRm6XZtztFaSy3kJzXMF8i8I4SE1bMppw1lXOPXsInXVb:h/LmxUZsDPZE1Mppw1lXOPXsInl

Score

6^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a700f3fa0a5022c8f6e7e8dee63f7980_JaffaCakes118
- Size
  
  136KB
- MD5
  
  a700f3fa0a5022c8f6e7e8dee63f7980
- SHA1
  
  9b7bb5746970f6c19b431c848fdd3412f70d9391
- SHA256
  
  90faf09201883b1c21cd12ee971565d74b56a0485d9e8130666dc51d40ee718f
- SHA512
  
  e51633b9fec76019134ccc8dc8f57928b5659a61c86079f2096ef0361b61961f35f4e6bedd205b6a3478996e67860e4abb50fee8c7edfb9c5df68ad777541ee2
- SSDEEP
  
  3072:h/B/FFRm6XZtztFaSy3kJzXMF8i8I4SE1bMppw1lXOPXsInXVb:h/LmxUZsDPZE1Mppw1lXOPXsInl
Score

6^/10

discovery persistence privilege_escalation
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation