cca3e502bdd69192cf7b2af3ff394b3b7b98e6a692240992f4cc3d47e7af6fd7 | Triage

Sharing

General

Target

bf221bd7e3d3091a906c779f3409fcdf_JaffaCakes118
Size

41KB
Sample

240824-wbhhyatdmp
MD5

bf221bd7e3d3091a906c779f3409fcdf
SHA1

c6861d77e1dea90aef46507666a17ec317b136f7
SHA256

cca3e502bdd69192cf7b2af3ff394b3b7b98e6a692240992f4cc3d47e7af6fd7
SHA512

9cd6c6d7cd7349a5fb5bf5ae98bc1aed5d0e3671a00256136ede68f4aa7e2a119328f73d8b055cad9e92593d4a48ed2d16b5477937f16bef8d6f6566845ddf54
SSDEEP

768:xEV1nIuNkIMbI0zP71kIK3gtYHOn5yOMlUa+wub3gs+nrPbO:L/IeIMPKIKwtL5yXS2Flzq

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  bf221bd7e3d3091a906c779f3409fcdf_JaffaCakes118
- Size
  
  41KB
- MD5
  
  bf221bd7e3d3091a906c779f3409fcdf
- SHA1
  
  c6861d77e1dea90aef46507666a17ec317b136f7
- SHA256
  
  cca3e502bdd69192cf7b2af3ff394b3b7b98e6a692240992f4cc3d47e7af6fd7
- SHA512
  
  9cd6c6d7cd7349a5fb5bf5ae98bc1aed5d0e3671a00256136ede68f4aa7e2a119328f73d8b055cad9e92593d4a48ed2d16b5477937f16bef8d6f6566845ddf54
- SSDEEP
  
  768:xEV1nIuNkIMbI0zP71kIK3gtYHOn5yOMlUa+wub3gs+nrPbO:L/IeIMPKIKwtL5yXS2Flzq
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2