4e72250878f8790b201364ea9e13c2108b9307f7cf7ed046213c9f1ee8cbf106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af26da59855dbde2a47e5e5d40d339c8_JaffaCakes118
Size

689KB
Sample

240820-pagfxs1ape
MD5

af26da59855dbde2a47e5e5d40d339c8
SHA1

0a5bc2dcc301038ab1619e48e311ef8d947b2419
SHA256

4e72250878f8790b201364ea9e13c2108b9307f7cf7ed046213c9f1ee8cbf106
SHA512

13348d7fa5822149df610ecd91e73049823e7f16f5e41f14e4f029734d2c50cc6e7586690e9a4a619ca5bacbb51108c63ce686c75a2bb8535b4bdfb2b9b34b22
SSDEEP

12288:z39Hq03vF1UzUmu0om1FKmxkeTXkUb8Wh/yI1L5wu01fF3Z4mxx9JqZxaivF:b9HjtsUT0omIGvpd1L6u0xQmX9JqZYiN

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  af26da59855dbde2a47e5e5d40d339c8_JaffaCakes118
- Size
  
  689KB
- MD5
  
  af26da59855dbde2a47e5e5d40d339c8
- SHA1
  
  0a5bc2dcc301038ab1619e48e311ef8d947b2419
- SHA256
  
  4e72250878f8790b201364ea9e13c2108b9307f7cf7ed046213c9f1ee8cbf106
- SHA512
  
  13348d7fa5822149df610ecd91e73049823e7f16f5e41f14e4f029734d2c50cc6e7586690e9a4a619ca5bacbb51108c63ce686c75a2bb8535b4bdfb2b9b34b22
- SSDEEP
  
  12288:z39Hq03vF1UzUmu0om1FKmxkeTXkUb8Wh/yI1L5wu01fF3Z4mxx9JqZxaivF:b9HjtsUT0omIGvpd1L6u0xQmX9JqZYiN
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence