003d982fafcd197096cddf13439d166aa0a1bef5a2245ee63cb7481736fe2d85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad58e43d67ee414542b7b1539854affa_JaffaCakes118
Size

307KB
Sample

240820-bpskvazgnm
MD5

ad58e43d67ee414542b7b1539854affa
SHA1

3c386c0287f3f14178d1c885f6892f88e95cbf6d
SHA256

003d982fafcd197096cddf13439d166aa0a1bef5a2245ee63cb7481736fe2d85
SHA512

71f4de67c8d1cab2f77bdbb09cdc4d0de532d1881ee7fcd41e18c1c2c8365be7153d450178241626eb004b7df942ce3b86ea911d04d5dd68542699b154c0792e
SSDEEP

6144:6o3DTgvjU7BMMp78iPboJoSbocmYaXY/pFk/58BB0:6ozTSjWBF7NPbLzXyUy0

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ad58e43d67ee414542b7b1539854affa_JaffaCakes118
- Size
  
  307KB
- MD5
  
  ad58e43d67ee414542b7b1539854affa
- SHA1
  
  3c386c0287f3f14178d1c885f6892f88e95cbf6d
- SHA256
  
  003d982fafcd197096cddf13439d166aa0a1bef5a2245ee63cb7481736fe2d85
- SHA512
  
  71f4de67c8d1cab2f77bdbb09cdc4d0de532d1881ee7fcd41e18c1c2c8365be7153d450178241626eb004b7df942ce3b86ea911d04d5dd68542699b154c0792e
- SSDEEP
  
  6144:6o3DTgvjU7BMMp78iPboJoSbocmYaXY/pFk/58BB0:6ozTSjWBF7NPbLzXyUy0
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2