26d6f2c993fc58650cd473467fa41da2f65486b134cc522401a63c0c385cdf43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbaf6481e4cf06986bf5ae09d54ac7e4_JaffaCakes118
Size

312KB
Sample

240823-pe5z3swcjn
MD5

bbaf6481e4cf06986bf5ae09d54ac7e4
SHA1

c14c4a510bed55d10d232547674c5f7f48423ea0
SHA256

26d6f2c993fc58650cd473467fa41da2f65486b134cc522401a63c0c385cdf43
SHA512

567a13a0de0b61e5b4d53ca027929c0d1a37b21bb70e209b2d9da5d2563d1f36ee1fbfceccd98eee884b192e0e43a662e3d642501ddb1c3daed727701d0a7b1f
SSDEEP

6144:J8pSojNsi/bW2RgGNyiDhPYtPc2q8UDZkE:J8wojNdNRgGNywhPoFUDZ

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  bbaf6481e4cf06986bf5ae09d54ac7e4_JaffaCakes118
- Size
  
  312KB
- MD5
  
  bbaf6481e4cf06986bf5ae09d54ac7e4
- SHA1
  
  c14c4a510bed55d10d232547674c5f7f48423ea0
- SHA256
  
  26d6f2c993fc58650cd473467fa41da2f65486b134cc522401a63c0c385cdf43
- SHA512
  
  567a13a0de0b61e5b4d53ca027929c0d1a37b21bb70e209b2d9da5d2563d1f36ee1fbfceccd98eee884b192e0e43a662e3d642501ddb1c3daed727701d0a7b1f
- SSDEEP
  
  6144:J8pSojNsi/bW2RgGNyiDhPYtPc2q8UDZkE:J8wojNdNRgGNywhPoFUDZ
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence