c3cb9eea09d75baf41a2f144cc13f68a1c0b1629dccdf9f60a4dfdc5f57161ff | Triage

Sharing

General

Target

ac9f2259ac4b8c19db9123e822f3a107_JaffaCakes118
Size

1.1MB
Sample

240819-z56peazfrm
MD5

ac9f2259ac4b8c19db9123e822f3a107
SHA1

88267d8ac120780655976607f02b960bedf3a9b5
SHA256

c3cb9eea09d75baf41a2f144cc13f68a1c0b1629dccdf9f60a4dfdc5f57161ff
SHA512

35002ce9923ad9cd656c48b0b8b1e12bd2fcdc8081328c287277909201ed53a8332c07a7fbb181eae9a73516a2246936788459dfd632db6ebf2017466261c216
SSDEEP

24576:uY7426SR4y0K2+ObYkmOBkSCk0Oshvqb4UVlavIK:uwZKbVSSCJFrgla

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ac9f2259ac4b8c19db9123e822f3a107_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  ac9f2259ac4b8c19db9123e822f3a107
- SHA1
  
  88267d8ac120780655976607f02b960bedf3a9b5
- SHA256
  
  c3cb9eea09d75baf41a2f144cc13f68a1c0b1629dccdf9f60a4dfdc5f57161ff
- SHA512
  
  35002ce9923ad9cd656c48b0b8b1e12bd2fcdc8081328c287277909201ed53a8332c07a7fbb181eae9a73516a2246936788459dfd632db6ebf2017466261c216
- SSDEEP
  
  24576:uY7426SR4y0K2+ObYkmOBkSCk0Oshvqb4UVlavIK:uwZKbVSSCJFrgla
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2