f2e535776a1a08fc96839f5d09110db22a4d9cfcfca8210b4065a46021e446f9 | Triage

Sharing

General

Target

b3483c07cc886a60bc8c3bbf90a35d19_JaffaCakes118
Size

9KB
Sample

240821-nkh7tszbjn
MD5

b3483c07cc886a60bc8c3bbf90a35d19
SHA1

7d3fa0a993a1621236c8ec3e347fa7020c0bd030
SHA256

f2e535776a1a08fc96839f5d09110db22a4d9cfcfca8210b4065a46021e446f9
SHA512

09e03992cf6af16494cecc51af4acd8dd8f3050ebce8cf38c3e49a4d68df6c15bb6f5bf1040500c7bad383287c9936bffff8a97139a4ba5213dc475bfa99a795
SSDEEP

192:qkHWWiiU901xlkWH8CJxDpdhtlSxHJWc/FUfB67lR:quHiiU01xl1p1lSnWc/Fu67l

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b3483c07cc886a60bc8c3bbf90a35d19_JaffaCakes118
- Size
  
  9KB
- MD5
  
  b3483c07cc886a60bc8c3bbf90a35d19
- SHA1
  
  7d3fa0a993a1621236c8ec3e347fa7020c0bd030
- SHA256
  
  f2e535776a1a08fc96839f5d09110db22a4d9cfcfca8210b4065a46021e446f9
- SHA512
  
  09e03992cf6af16494cecc51af4acd8dd8f3050ebce8cf38c3e49a4d68df6c15bb6f5bf1040500c7bad383287c9936bffff8a97139a4ba5213dc475bfa99a795
- SSDEEP
  
  192:qkHWWiiU901xlkWH8CJxDpdhtlSxHJWc/FUfB67lR:quHiiU01xl1p1lSnWc/Fu67l
Score

8^/10

persistence discovery
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence