fa0484efa5836a1bc35fcc7a1f7785f01a413a11472fcfe2d402517d5633d298 | Triage

Sharing

General

Target

b6992046308026e8ecfd916635f01945_JaffaCakes118
Size

86KB
Sample

240822-gry4assbmg
MD5

b6992046308026e8ecfd916635f01945
SHA1

1a36db1defc0304d3f54e205bbddc5e08b6324b5
SHA256

fa0484efa5836a1bc35fcc7a1f7785f01a413a11472fcfe2d402517d5633d298
SHA512

16f9145110803c106246d9a30d8a2ba4fc423a6ad9998e4279fede845801a03bf0733926136beea46963334432d4c20054a348b3ca5b7c6b682308f1c5e9c7d9
SSDEEP

1536:DtQZ47o9eahVeYav9RA9AMcRJ81FGCHOaOrAUySTQJ:Di6WTGRQcRJ81cCHOaOrAUySTQJ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b6992046308026e8ecfd916635f01945_JaffaCakes118
- Size
  
  86KB
- MD5
  
  b6992046308026e8ecfd916635f01945
- SHA1
  
  1a36db1defc0304d3f54e205bbddc5e08b6324b5
- SHA256
  
  fa0484efa5836a1bc35fcc7a1f7785f01a413a11472fcfe2d402517d5633d298
- SHA512
  
  16f9145110803c106246d9a30d8a2ba4fc423a6ad9998e4279fede845801a03bf0733926136beea46963334432d4c20054a348b3ca5b7c6b682308f1c5e9c7d9
- SSDEEP
  
  1536:DtQZ47o9eahVeYav9RA9AMcRJ81FGCHOaOrAUySTQJ:Di6WTGRQcRJ81cCHOaOrAUySTQJ
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2