70f7690063fe2e2dd09c6014ec3a0579eebdc16dd4a33bf67b1fbabda98ffbae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b42d56e391efcf410b889fe9d5bd9bb8_JaffaCakes118
Size

969KB
Sample

240821-twm8tayepe
MD5

b42d56e391efcf410b889fe9d5bd9bb8
SHA1

69f9265f88a54169c993e0537b4c9d5b26c7507d
SHA256

70f7690063fe2e2dd09c6014ec3a0579eebdc16dd4a33bf67b1fbabda98ffbae
SHA512

20c185538924dde4b5a877df800c188bd9357526c088a10af43ef5db50d680b557c5fd24dcb2a0552ae173a9827e2f5de2d1108a06b8022e345cf214aec45646
SSDEEP

24576:aE/HutfwiR+W0Ui9TWluSupAm55ELeMAYNEt:5OtoH6iAluXpOSto

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b42d56e391efcf410b889fe9d5bd9bb8_JaffaCakes118
- Size
  
  969KB
- MD5
  
  b42d56e391efcf410b889fe9d5bd9bb8
- SHA1
  
  69f9265f88a54169c993e0537b4c9d5b26c7507d
- SHA256
  
  70f7690063fe2e2dd09c6014ec3a0579eebdc16dd4a33bf67b1fbabda98ffbae
- SHA512
  
  20c185538924dde4b5a877df800c188bd9357526c088a10af43ef5db50d680b557c5fd24dcb2a0552ae173a9827e2f5de2d1108a06b8022e345cf214aec45646
- SSDEEP
  
  24576:aE/HutfwiR+W0Ui9TWluSupAm55ELeMAYNEt:5OtoH6iAluXpOSto
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence