41057df26c2ea138e06245a6cffa25b53c4c57db5c86ca683bb7bebe8454ac87 | Triage

Sharing

General

Target

bc7c353e354e765218b474296add06d8_JaffaCakes118
Size

125KB
Sample

240823-t1kngsxfkr
MD5

bc7c353e354e765218b474296add06d8
SHA1

a9a89d9a4a5ad86f555481dd85c9cb8d566c57e8
SHA256

41057df26c2ea138e06245a6cffa25b53c4c57db5c86ca683bb7bebe8454ac87
SHA512

874f1b4d7759ae4a715f475dc4c9b0807ba61bac8b4e08ea0fb61a019cb4f5f7d8ac0a20ba5402eb7e25dbc0f51e386230502e3b5e08ad18dd61ae55608f026b
SSDEEP

3072:EJgwBIxhn+dz7diTqkGqcZBUPs7dHNnu3lAzyDJkluJfBd8x:EuwWx8fScnUPey1BtB

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bc7c353e354e765218b474296add06d8_JaffaCakes118
- Size
  
  125KB
- MD5
  
  bc7c353e354e765218b474296add06d8
- SHA1
  
  a9a89d9a4a5ad86f555481dd85c9cb8d566c57e8
- SHA256
  
  41057df26c2ea138e06245a6cffa25b53c4c57db5c86ca683bb7bebe8454ac87
- SHA512
  
  874f1b4d7759ae4a715f475dc4c9b0807ba61bac8b4e08ea0fb61a019cb4f5f7d8ac0a20ba5402eb7e25dbc0f51e386230502e3b5e08ad18dd61ae55608f026b
- SSDEEP
  
  3072:EJgwBIxhn+dz7diTqkGqcZBUPs7dHNnu3lAzyDJkluJfBd8x:EuwWx8fScnUPey1BtB
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2