763812af973d7b41d0c9fd88920ebdd238b4b20ce2a97f41e61e14a44b1f29e6 | Triage

Sharing

General

Target

b1060ef3d3fcb6f3bcb1ab4767bc8187_JaffaCakes118
Size

184KB
Sample

240820-11q9lazckn
MD5

b1060ef3d3fcb6f3bcb1ab4767bc8187
SHA1

34183966b614f726464fbe143b2808eab2fd03f2
SHA256

763812af973d7b41d0c9fd88920ebdd238b4b20ce2a97f41e61e14a44b1f29e6
SHA512

266edf235c864236d61c371ffeee59bb68384d6febf5dd3dd769e8d1740d93038a2fa8a92d3242dc53f0237a4cd29ff13eae75626ab5d93342be3b0fb88c2b0d
SSDEEP

3072:DTbVjZY90ob8NbLP4PQUspAtJ1lPdaaxscPjBun3IFy15:DTbVji9+wPYC9aa7F844

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1060ef3d3fcb6f3bcb1ab4767bc8187_JaffaCakes118
- Size
  
  184KB
- MD5
  
  b1060ef3d3fcb6f3bcb1ab4767bc8187
- SHA1
  
  34183966b614f726464fbe143b2808eab2fd03f2
- SHA256
  
  763812af973d7b41d0c9fd88920ebdd238b4b20ce2a97f41e61e14a44b1f29e6
- SHA512
  
  266edf235c864236d61c371ffeee59bb68384d6febf5dd3dd769e8d1740d93038a2fa8a92d3242dc53f0237a4cd29ff13eae75626ab5d93342be3b0fb88c2b0d
- SSDEEP
  
  3072:DTbVjZY90ob8NbLP4PQUspAtJ1lPdaaxscPjBun3IFy15:DTbVji9+wPYC9aa7F844
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence