53399deecdc6890fb7f70f404cbf84e45f0dc38ffefa2a799a3248001859851e | Triage

Sharing

General

Target

bbf79ccfd0f400fa57b89efe3454e049_JaffaCakes118
Size

998KB
Sample

240823-qz6msazcqr
MD5

bbf79ccfd0f400fa57b89efe3454e049
SHA1

5abcb40dd4e09466e66602242b0e9bffad7f1c18
SHA256

53399deecdc6890fb7f70f404cbf84e45f0dc38ffefa2a799a3248001859851e
SHA512

3ba6d5a16efda02d622a9c78877b4e63af8d7ce7398ccc40e5e40e254f1fff19e65b38ed70a123bbe4afa4ecbedd6cb9b245050715d752b56c30bf753dde71ed
SSDEEP

24576:ap99g2LBIJJIypNtS3Bq8pITPli0QzYGD0YEo8i:y99NIMypCxOTPlisE0YM

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bbf79ccfd0f400fa57b89efe3454e049_JaffaCakes118
- Size
  
  998KB
- MD5
  
  bbf79ccfd0f400fa57b89efe3454e049
- SHA1
  
  5abcb40dd4e09466e66602242b0e9bffad7f1c18
- SHA256
  
  53399deecdc6890fb7f70f404cbf84e45f0dc38ffefa2a799a3248001859851e
- SHA512
  
  3ba6d5a16efda02d622a9c78877b4e63af8d7ce7398ccc40e5e40e254f1fff19e65b38ed70a123bbe4afa4ecbedd6cb9b245050715d752b56c30bf753dde71ed
- SSDEEP
  
  24576:ap99g2LBIJJIypNtS3Bq8pITPli0QzYGD0YEo8i:y99NIMypCxOTPlisE0YM
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence