191c373cc52ab328fccf2c2093ea197844489d229ca75954853c985b23930fb6 | Triage

Sharing

General

Target

afe770409aa035ff1b5f18541dda9f03_JaffaCakes118
Size

1004KB
Sample

240820-tls2ba1emb
MD5

afe770409aa035ff1b5f18541dda9f03
SHA1

e44398e14eefcc2a829c889109f904acca6fb2d0
SHA256

191c373cc52ab328fccf2c2093ea197844489d229ca75954853c985b23930fb6
SHA512

af3e9a18aa0affc66397060d6862137e91c87b06e126d50311ae911789558a66daa568d7a585cc01b0a1c6e557b2c289dba0330a9859a6f2e3b2c44372bce1c1
SSDEEP

12288:9GlFBDUDcEWt4ahOU9LSgypY6//Ka6RLKg2GC0DvwkXYAsfXDaRVxtHsWzC:YbBIqDhd4xSM86zaRVxtHFzC

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  afe770409aa035ff1b5f18541dda9f03_JaffaCakes118
- Size
  
  1004KB
- MD5
  
  afe770409aa035ff1b5f18541dda9f03
- SHA1
  
  e44398e14eefcc2a829c889109f904acca6fb2d0
- SHA256
  
  191c373cc52ab328fccf2c2093ea197844489d229ca75954853c985b23930fb6
- SHA512
  
  af3e9a18aa0affc66397060d6862137e91c87b06e126d50311ae911789558a66daa568d7a585cc01b0a1c6e557b2c289dba0330a9859a6f2e3b2c44372bce1c1
- SSDEEP
  
  12288:9GlFBDUDcEWt4ahOU9LSgypY6//Ka6RLKg2GC0DvwkXYAsfXDaRVxtHsWzC:YbBIqDhd4xSM86zaRVxtHFzC
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence