995969be9fc2c3e50687f7e6a852288feed4d3726eab57bd7cdcb45ff7be7091 | Triage

Sharing

General

Target

b7ae676bab048adebb98eb8521c72302_JaffaCakes118
Size

321KB
Sample

240822-pxhx9szgkm
MD5

b7ae676bab048adebb98eb8521c72302
SHA1

fa10aec49e954ccd21de4f514958af3a066d121c
SHA256

995969be9fc2c3e50687f7e6a852288feed4d3726eab57bd7cdcb45ff7be7091
SHA512

b94f7299dce2aef54ae2fc49f48fc1c72b778b1b5a4e2ac65e5b05459aab994a9a4faf2d2234188c493ee63296fde6df811e9009d89757341003b6193e7f4efd
SSDEEP

6144:vT+FQoCd72swMHScIOq1G/PvRnC2CkErfos:CFhCzycBqwvRC2gcs

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b7ae676bab048adebb98eb8521c72302_JaffaCakes118
- Size
  
  321KB
- MD5
  
  b7ae676bab048adebb98eb8521c72302
- SHA1
  
  fa10aec49e954ccd21de4f514958af3a066d121c
- SHA256
  
  995969be9fc2c3e50687f7e6a852288feed4d3726eab57bd7cdcb45ff7be7091
- SHA512
  
  b94f7299dce2aef54ae2fc49f48fc1c72b778b1b5a4e2ac65e5b05459aab994a9a4faf2d2234188c493ee63296fde6df811e9009d89757341003b6193e7f4efd
- SSDEEP
  
  6144:vT+FQoCd72swMHScIOq1G/PvRnC2CkErfos:CFhCzycBqwvRC2gcs
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2