0353e1bd43b16d5d2692c793caa83a1c32670f602f30da641735b81b13f690c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad88d27af48030393b62b0d92cd85b52_JaffaCakes118
Size

688KB
Sample

240820-ctvrfashlr
MD5

ad88d27af48030393b62b0d92cd85b52
SHA1

ea60f211556f7fb4b49981e13dc0867066bbaa55
SHA256

0353e1bd43b16d5d2692c793caa83a1c32670f602f30da641735b81b13f690c0
SHA512

1f8f954bb10f0c296ae51d872a479607d6911a6ba86414ae507600e79103fa7600b06312a7e1c4696b6553785a014ae8365d86da349db051ffb6873c93b2a32e
SSDEEP

12288:YaCqvuEt+uZr8qMpf29dWWU7u080F3Z4mxxu9A3fxBeJfk+7:YrEt+ywqMl29dsS080QmXum5Etf

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ad88d27af48030393b62b0d92cd85b52_JaffaCakes118
- Size
  
  688KB
- MD5
  
  ad88d27af48030393b62b0d92cd85b52
- SHA1
  
  ea60f211556f7fb4b49981e13dc0867066bbaa55
- SHA256
  
  0353e1bd43b16d5d2692c793caa83a1c32670f602f30da641735b81b13f690c0
- SHA512
  
  1f8f954bb10f0c296ae51d872a479607d6911a6ba86414ae507600e79103fa7600b06312a7e1c4696b6553785a014ae8365d86da349db051ffb6873c93b2a32e
- SSDEEP
  
  12288:YaCqvuEt+uZr8qMpf29dWWU7u080F3Z4mxxu9A3fxBeJfk+7:YrEt+ywqMl29dsS080QmXum5Etf
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence