cb0e517e01383c692ec34bd2a9937ef19377b78a2ef7cdc64f3ab58f07360aeb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afa20b279a2fab51f1c678f682bf82a3_JaffaCakes118
Size

326KB
Sample

240820-r3hkss1gmp
MD5

afa20b279a2fab51f1c678f682bf82a3
SHA1

596c3e84af1801b30667d04c3d444abd5e5d36c7
SHA256

cb0e517e01383c692ec34bd2a9937ef19377b78a2ef7cdc64f3ab58f07360aeb
SHA512

c43a735cb4d5cc696b2cd41ac07cbcc9e6cdabb874fb1cd48962a0ec0f3d847ef51b691e524d08f8cb8d0664ea0554e22e7dcac43c50fad199ced0206dd124da
SSDEEP

6144:mYM5EZFYtgLUrGJj9bpUkBDBZ4794WoMTmQepG6hv8P5WfQTWlCAaQrG+:mn56FkgLFtB2x4TfLhUhWIECAaQt

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  afa20b279a2fab51f1c678f682bf82a3_JaffaCakes118
- Size
  
  326KB
- MD5
  
  afa20b279a2fab51f1c678f682bf82a3
- SHA1
  
  596c3e84af1801b30667d04c3d444abd5e5d36c7
- SHA256
  
  cb0e517e01383c692ec34bd2a9937ef19377b78a2ef7cdc64f3ab58f07360aeb
- SHA512
  
  c43a735cb4d5cc696b2cd41ac07cbcc9e6cdabb874fb1cd48962a0ec0f3d847ef51b691e524d08f8cb8d0664ea0554e22e7dcac43c50fad199ced0206dd124da
- SSDEEP
  
  6144:mYM5EZFYtgLUrGJj9bpUkBDBZ4794WoMTmQepG6hv8P5WfQTWlCAaQrG+:mn56FkgLFtB2x4TfLhUhWIECAaQt
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2