5e590b675ef06f1d3c2040a022de030dedc28e07e2a467a1cad79e1c97db479d | Triage

Sharing

General

Target

b9fb952c727a5764544ce3ea2d566ae7_JaffaCakes118
Size

186KB
Sample

240823-cr2f7ssfqq
MD5

b9fb952c727a5764544ce3ea2d566ae7
SHA1

c9d792a9d486ba1af44afddf8c62baddc702e79c
SHA256

5e590b675ef06f1d3c2040a022de030dedc28e07e2a467a1cad79e1c97db479d
SHA512

b61d16fdf8080069aa0405fa414296d8438c023df4343b5302679c6e01fde791f6b0f5c5246d40fae3a51d16f969aab7483a8210b80da55c5d13266aaeaf382d
SSDEEP

3072:1Pn92Nl8TYMDnquKIwvHF5/gNNnz090WN81Kcf3myNBRX:1/90K0keIwP4NpI6WN8b/zNBR

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b9fb952c727a5764544ce3ea2d566ae7_JaffaCakes118
- Size
  
  186KB
- MD5
  
  b9fb952c727a5764544ce3ea2d566ae7
- SHA1
  
  c9d792a9d486ba1af44afddf8c62baddc702e79c
- SHA256
  
  5e590b675ef06f1d3c2040a022de030dedc28e07e2a467a1cad79e1c97db479d
- SHA512
  
  b61d16fdf8080069aa0405fa414296d8438c023df4343b5302679c6e01fde791f6b0f5c5246d40fae3a51d16f969aab7483a8210b80da55c5d13266aaeaf382d
- SSDEEP
  
  3072:1Pn92Nl8TYMDnquKIwvHF5/gNNnz090WN81Kcf3myNBRX:1/90K0keIwP4NpI6WN8b/zNBR
Score

6^/10

persistence discovery
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence