7d63e7a5663f179ec0632b205bad86e281dc62ebb21d36c8fa50f51811366d70 | Triage

Sharing

General

Target

bd47905f692020f420eb9c1e6418d168_JaffaCakes118
Size

38KB
Sample

240823-1nxwlsyekb
MD5

bd47905f692020f420eb9c1e6418d168
SHA1

4d0fd2df74a51780db4b5c7030bdf31d199a40f9
SHA256

7d63e7a5663f179ec0632b205bad86e281dc62ebb21d36c8fa50f51811366d70
SHA512

f9e97c3fe4c03e697b090d2efbf90238bdb471eee0772847e996107b08a5365ed2dbf95f5c9435e937ff321c12b2de6d32754abbf47f82cf663e00004c79fde2
SSDEEP

768:I1xwcfWJXOkgTiadmgBWpTl7dSQXv9cmf3hTThpx/YYKZI1fpKMaJbrvp3h:pJITiWmgB+lpb/7NTxQApaJbrvpR

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bd47905f692020f420eb9c1e6418d168_JaffaCakes118
- Size
  
  38KB
- MD5
  
  bd47905f692020f420eb9c1e6418d168
- SHA1
  
  4d0fd2df74a51780db4b5c7030bdf31d199a40f9
- SHA256
  
  7d63e7a5663f179ec0632b205bad86e281dc62ebb21d36c8fa50f51811366d70
- SHA512
  
  f9e97c3fe4c03e697b090d2efbf90238bdb471eee0772847e996107b08a5365ed2dbf95f5c9435e937ff321c12b2de6d32754abbf47f82cf663e00004c79fde2
- SSDEEP
  
  768:I1xwcfWJXOkgTiadmgBWpTl7dSQXv9cmf3hTThpx/YYKZI1fpKMaJbrvp3h:pJITiWmgB+lpb/7NTxQApaJbrvpR
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2