6a3eb5a8510f4f4dec90e283ae72073f701c0dc3b074eb519ad971e6cd1b9b1b | Triage

Sharing

General

Target

a9ba6aca9753e14bcdd68f1e2f516ef7_JaffaCakes118
Size

68KB
Sample

240819-fw6hhawcqa
MD5

a9ba6aca9753e14bcdd68f1e2f516ef7
SHA1

e08ed42ae7d42f3a79663458ace96390323a469b
SHA256

6a3eb5a8510f4f4dec90e283ae72073f701c0dc3b074eb519ad971e6cd1b9b1b
SHA512

97034b4fbffa5b9fdbae29c451270de990d933d6020dede7c790a3959cbc1680a09870359a9f2c2602280f167571f9cf45b4cd33c3a3c0ee18f5c90613caf671
SSDEEP

1536:FNxU+W+73uSpoo3e/8+dcr2yS72W9Rdd8fOSX:NU+W+qNo3e9Sy/9kX

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a9ba6aca9753e14bcdd68f1e2f516ef7_JaffaCakes118
- Size
  
  68KB
- MD5
  
  a9ba6aca9753e14bcdd68f1e2f516ef7
- SHA1
  
  e08ed42ae7d42f3a79663458ace96390323a469b
- SHA256
  
  6a3eb5a8510f4f4dec90e283ae72073f701c0dc3b074eb519ad971e6cd1b9b1b
- SHA512
  
  97034b4fbffa5b9fdbae29c451270de990d933d6020dede7c790a3959cbc1680a09870359a9f2c2602280f167571f9cf45b4cd33c3a3c0ee18f5c90613caf671
- SSDEEP
  
  1536:FNxU+W+73uSpoo3e/8+dcr2yS72W9Rdd8fOSX:NU+W+qNo3e9Sy/9kX
Score

8^/10

discovery persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence