b8914b69268957fa1fa00e5bf3025f307960f2f4ba9168614f45eb713cf4ce36 | Triage

Sharing

General

Target

bccfc1708d0a502c7e162d44e76ea6a4_JaffaCakes118
Size

293KB
Sample

240823-xqqcrstapq
MD5

bccfc1708d0a502c7e162d44e76ea6a4
SHA1

95f5e2037a7c5a55c2788970d0be3da541485fed
SHA256

b8914b69268957fa1fa00e5bf3025f307960f2f4ba9168614f45eb713cf4ce36
SHA512

3cac224121f9cab8e6c9f63a267e561f081d1b201987dc43435af895750b5daae868463ddb3eb2d18fcff2a77e104b56b34cadea2147807d2ef70974a8f711c9
SSDEEP

6144:yPdM6MANEVzGlcEDUl4qaRYVQOJTGbusJRhgnGXcbD7Xm2BeddhMHWDiu:ENEh8cSLqdJsisDhgnGMBBedDM2Dt

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bccfc1708d0a502c7e162d44e76ea6a4_JaffaCakes118
- Size
  
  293KB
- MD5
  
  bccfc1708d0a502c7e162d44e76ea6a4
- SHA1
  
  95f5e2037a7c5a55c2788970d0be3da541485fed
- SHA256
  
  b8914b69268957fa1fa00e5bf3025f307960f2f4ba9168614f45eb713cf4ce36
- SHA512
  
  3cac224121f9cab8e6c9f63a267e561f081d1b201987dc43435af895750b5daae868463ddb3eb2d18fcff2a77e104b56b34cadea2147807d2ef70974a8f711c9
- SSDEEP
  
  6144:yPdM6MANEVzGlcEDUl4qaRYVQOJTGbusJRhgnGXcbD7Xm2BeddhMHWDiu:ENEh8cSLqdJsisDhgnGMBBedDM2Dt
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2