c7f316c096188bf5ae32f4e9ae3b30f71d776b97c791ba4bdf1d8ea87e71b556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b61f8f7a4ed46719397fcaccfbdf44ce_JaffaCakes118
Size

44KB
Sample

240822-dmsh6svhre
MD5

b61f8f7a4ed46719397fcaccfbdf44ce
SHA1

806b9edbb8b2cd99eeb6251342c3dc32cc4cb061
SHA256

c7f316c096188bf5ae32f4e9ae3b30f71d776b97c791ba4bdf1d8ea87e71b556
SHA512

580ac40e4df004c1dfed7ef1694bb56ac3a42c5903b2ec6b52791cfc313cc1f38bbfad62d58a9dfd725548ac6c3fa7775ef386780dde8811c64a9ae7582ac6e0
SSDEEP

384:yzUSlCw0+nj554syYfnoDQugTjurct/SesClaHFbS0L9WboBK4:w37zj55N7fnokbb/RjUtS0xWboBK4

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b61f8f7a4ed46719397fcaccfbdf44ce_JaffaCakes118
- Size
  
  44KB
- MD5
  
  b61f8f7a4ed46719397fcaccfbdf44ce
- SHA1
  
  806b9edbb8b2cd99eeb6251342c3dc32cc4cb061
- SHA256
  
  c7f316c096188bf5ae32f4e9ae3b30f71d776b97c791ba4bdf1d8ea87e71b556
- SHA512
  
  580ac40e4df004c1dfed7ef1694bb56ac3a42c5903b2ec6b52791cfc313cc1f38bbfad62d58a9dfd725548ac6c3fa7775ef386780dde8811c64a9ae7582ac6e0
- SSDEEP
  
  384:yzUSlCw0+nj554syYfnoDQugTjurct/SesClaHFbS0L9WboBK4:w37zj55N7fnokbb/RjUtS0xWboBK4
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence