b53aefe182fef03efb37664af4bd34aefab16b799fe389a6cc01fcf8174c4d43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b754176f97f9909e66eb38a1ad07a109_JaffaCakes118
Size

69KB
Sample

240822-msezpsvgqk
MD5

b754176f97f9909e66eb38a1ad07a109
SHA1

a30c333ddc3196850796229e84d2dfcf066e4551
SHA256

b53aefe182fef03efb37664af4bd34aefab16b799fe389a6cc01fcf8174c4d43
SHA512

8fb0d5653199fd85d9e487a0baf1e9d931a6d3a4c0cb04b7aa376e951aea1e673212ba4144b3aa3a576efe5458e5ebb853c8e14a605fd18e84dd412c6e5c525a
SSDEEP

1536:RdJkLIgLxvjGoPVpobl09Sjpk3KaBrT35WKm+sIFM:RdJkkGvjraKf33BrT35WKm0FM

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b754176f97f9909e66eb38a1ad07a109_JaffaCakes118
- Size
  
  69KB
- MD5
  
  b754176f97f9909e66eb38a1ad07a109
- SHA1
  
  a30c333ddc3196850796229e84d2dfcf066e4551
- SHA256
  
  b53aefe182fef03efb37664af4bd34aefab16b799fe389a6cc01fcf8174c4d43
- SHA512
  
  8fb0d5653199fd85d9e487a0baf1e9d931a6d3a4c0cb04b7aa376e951aea1e673212ba4144b3aa3a576efe5458e5ebb853c8e14a605fd18e84dd412c6e5c525a
- SSDEEP
  
  1536:RdJkLIgLxvjGoPVpobl09Sjpk3KaBrT35WKm+sIFM:RdJkkGvjraKf33BrT35WKm0FM
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence