f7ad1bbb7a6e2d9a7af4727457fa727c105f3f3391f3720f5f8c33bbabee2c27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd73dab3f6dcc0aaa555c18759d224db_JaffaCakes118
Size

1.6MB
Sample

240823-2mg97stbln
MD5

bd73dab3f6dcc0aaa555c18759d224db
SHA1

02f66a1776e91727c2a865482a934f64831d67c5
SHA256

f7ad1bbb7a6e2d9a7af4727457fa727c105f3f3391f3720f5f8c33bbabee2c27
SHA512

88d2e7fa73836ecf4251b0e836abd120f5160d059f88ef5026ad7c4232f7013193639e82b629d184da797e0413baa14bb148312b6dec1a0c973ed66b40b04ebc
SSDEEP

49152:Q86xqVcnTfDeH7knkfPL94kIF2TGS/pgdSQ8v8c/x:J+lnTfDeww5GS/pgdSQE

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  bd73dab3f6dcc0aaa555c18759d224db_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  bd73dab3f6dcc0aaa555c18759d224db
- SHA1
  
  02f66a1776e91727c2a865482a934f64831d67c5
- SHA256
  
  f7ad1bbb7a6e2d9a7af4727457fa727c105f3f3391f3720f5f8c33bbabee2c27
- SHA512
  
  88d2e7fa73836ecf4251b0e836abd120f5160d059f88ef5026ad7c4232f7013193639e82b629d184da797e0413baa14bb148312b6dec1a0c973ed66b40b04ebc
- SSDEEP
  
  49152:Q86xqVcnTfDeH7knkfPL94kIF2TGS/pgdSQ8v8c/x:J+lnTfDeww5GS/pgdSQE
Score

8^/10

discovery persistence
- Sets service image path in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence