6a2c51ef42853f36168f9955bd90858444eaad148109be96fcf1ea10110d6bc3 | Triage

Sharing

General

Target

a97a8af58a1c314b4872180cc61a0c22_JaffaCakes118
Size

92KB
Sample

240819-efe5yawfkp
MD5

a97a8af58a1c314b4872180cc61a0c22
SHA1

918105aab5e249a9ffe45ef6b255048d3220bc72
SHA256

6a2c51ef42853f36168f9955bd90858444eaad148109be96fcf1ea10110d6bc3
SHA512

63db66c7b85501158b5cf4f1132031fbd9bbd2b6f8540a29006aac1b04e7a059b285058a551bc5d1e46a490298ac640a4fac2f501060b2697fa54868f07da226
SSDEEP

1536:w40GZdRhifPPNha2lg38YdjhnW4U4qRjKm5j5mUhRo:H5vsTlg9dFnW4hqRj9Ooo

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a97a8af58a1c314b4872180cc61a0c22_JaffaCakes118
- Size
  
  92KB
- MD5
  
  a97a8af58a1c314b4872180cc61a0c22
- SHA1
  
  918105aab5e249a9ffe45ef6b255048d3220bc72
- SHA256
  
  6a2c51ef42853f36168f9955bd90858444eaad148109be96fcf1ea10110d6bc3
- SHA512
  
  63db66c7b85501158b5cf4f1132031fbd9bbd2b6f8540a29006aac1b04e7a059b285058a551bc5d1e46a490298ac640a4fac2f501060b2697fa54868f07da226
- SSDEEP
  
  1536:w40GZdRhifPPNha2lg38YdjhnW4U4qRjKm5j5mUhRo:H5vsTlg9dFnW4hqRj9Ooo
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence