d9df84fdaaee2e51cbf8e82180d90c256f30f4afb999f831f89c25e07b7118fd | Triage

Sharing

General

Target

aa1e15d341778150a3b882e8178ea59e_JaffaCakes118
Size

120KB
Sample

240819-h94xya1drg
MD5

aa1e15d341778150a3b882e8178ea59e
SHA1

95a34e2223637961a0ccc9f6ece7113ed4354c6f
SHA256

d9df84fdaaee2e51cbf8e82180d90c256f30f4afb999f831f89c25e07b7118fd
SHA512

e7e54dd53440a3657b662cc84b0e104f05b108afb323e4445f84a70fb9c7f9d5fa6d8c55edde0579e05826ff443de9dc57dda6c138131dfcc2b3c3497f9acbe4
SSDEEP

1536:HX2tAh15hxrmf7VlBSBzD7TbNau3doRzEg0H86Lx8CAcf+SuqGMLefNe6WE5RXQ:3v5hm7VmBP7PtReQJUhMLgEE5RX

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  aa1e15d341778150a3b882e8178ea59e_JaffaCakes118
- Size
  
  120KB
- MD5
  
  aa1e15d341778150a3b882e8178ea59e
- SHA1
  
  95a34e2223637961a0ccc9f6ece7113ed4354c6f
- SHA256
  
  d9df84fdaaee2e51cbf8e82180d90c256f30f4afb999f831f89c25e07b7118fd
- SHA512
  
  e7e54dd53440a3657b662cc84b0e104f05b108afb323e4445f84a70fb9c7f9d5fa6d8c55edde0579e05826ff443de9dc57dda6c138131dfcc2b3c3497f9acbe4
- SSDEEP
  
  1536:HX2tAh15hxrmf7VlBSBzD7TbNau3doRzEg0H86Lx8CAcf+SuqGMLefNe6WE5RXQ:3v5hm7VmBP7PtReQJUhMLgEE5RX
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence