120078cded95a2ece7225460897044303a8a74b1402520d1b3ad54b2c18191f3 | Triage

Sharing

General

Target

b0c64a19d28e4124429813e6a61b3dd9_JaffaCakes118
Size

26KB
Sample

240820-zkf81ssemh
MD5

b0c64a19d28e4124429813e6a61b3dd9
SHA1

84c71dc44384d1b69ef9c60e329105f4bf6b8045
SHA256

120078cded95a2ece7225460897044303a8a74b1402520d1b3ad54b2c18191f3
SHA512

f1559b642acd0a2d44dd5560e1b802fa645fe974d43d0b9929aa27a28a2f140a004f60b1f66c37b102dba5446344ee954ea225c070c3e6c58ae833bdc5460b83
SSDEEP

768:gX/3WaoKc9CD4KESGBP96poMUx0yjnKF:gX/GaoKUFTBspg0h

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b0c64a19d28e4124429813e6a61b3dd9_JaffaCakes118
- Size
  
  26KB
- MD5
  
  b0c64a19d28e4124429813e6a61b3dd9
- SHA1
  
  84c71dc44384d1b69ef9c60e329105f4bf6b8045
- SHA256
  
  120078cded95a2ece7225460897044303a8a74b1402520d1b3ad54b2c18191f3
- SHA512
  
  f1559b642acd0a2d44dd5560e1b802fa645fe974d43d0b9929aa27a28a2f140a004f60b1f66c37b102dba5446344ee954ea225c070c3e6c58ae833bdc5460b83
- SSDEEP
  
  768:gX/3WaoKc9CD4KESGBP96poMUx0yjnKF:gX/GaoKUFTBspg0h
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2