7a375374ede115ff411891f860eb99de239d086fc8b648129eaaed801bc9fc67 | Triage

Sharing

General

Target

acb56ec9a7f5e7880835af4316e168f5_JaffaCakes118
Size

96KB
Sample

240819-1nw93s1frn
MD5

acb56ec9a7f5e7880835af4316e168f5
SHA1

1d4b3da313e79f1786ba34c31a119fc71c63a797
SHA256

7a375374ede115ff411891f860eb99de239d086fc8b648129eaaed801bc9fc67
SHA512

c7ad63eb1445069d84bdac8058d5617860356da36262ba254fab05a022fe3641a3698966f38d9cde9f5c3b612c7d9ee9ca0475489d97079c21367705b36b62e2
SSDEEP

1536:+4iYy7IygxUxfzel1/w81Jff+qCi0o+Uctw07yqcC63T4ofUSehoIjUGtN5PWozt:6Yysye/9wY+Li0o+7tw07jksGGtNJ+Wb

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  acb56ec9a7f5e7880835af4316e168f5_JaffaCakes118
- Size
  
  96KB
- MD5
  
  acb56ec9a7f5e7880835af4316e168f5
- SHA1
  
  1d4b3da313e79f1786ba34c31a119fc71c63a797
- SHA256
  
  7a375374ede115ff411891f860eb99de239d086fc8b648129eaaed801bc9fc67
- SHA512
  
  c7ad63eb1445069d84bdac8058d5617860356da36262ba254fab05a022fe3641a3698966f38d9cde9f5c3b612c7d9ee9ca0475489d97079c21367705b36b62e2
- SSDEEP
  
  1536:+4iYy7IygxUxfzel1/w81Jff+qCi0o+Uctw07yqcC63T4ofUSehoIjUGtN5PWozt:6Yysye/9wY+Li0o+7tw07jksGGtNJ+Wb
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence