627001c4ec852f0b000367aa636198a1c89b2c5730d5af96a9641f638f3fe52d | Triage

Sharing

General

Target

c2580dde0f2fe04b824bf0e60015e7d4_JaffaCakes118
Size

21KB
Sample

240826-fsewdayblq
MD5

c2580dde0f2fe04b824bf0e60015e7d4
SHA1

5095c1a7835bfcdac7f76c29301eb81ff7856a0f
SHA256

627001c4ec852f0b000367aa636198a1c89b2c5730d5af96a9641f638f3fe52d
SHA512

d3a283a8b7fc1a4998986664743fd1d3a8335743aaf095bfda72475cf67846f731dcd80e789d877d368f9bd8c3c2ccdc565c2ba46e529d7974105facce306d61
SSDEEP

384:FiME7FL3u3M1FsplSUE+rFgMih/d7YddMhYuDmcvb/kx2HJFkILyfv:3Ezu8AbHrFgZj0dd1uacAxkJF+

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  c2580dde0f2fe04b824bf0e60015e7d4_JaffaCakes118
- Size
  
  21KB
- MD5
  
  c2580dde0f2fe04b824bf0e60015e7d4
- SHA1
  
  5095c1a7835bfcdac7f76c29301eb81ff7856a0f
- SHA256
  
  627001c4ec852f0b000367aa636198a1c89b2c5730d5af96a9641f638f3fe52d
- SHA512
  
  d3a283a8b7fc1a4998986664743fd1d3a8335743aaf095bfda72475cf67846f731dcd80e789d877d368f9bd8c3c2ccdc565c2ba46e529d7974105facce306d61
- SSDEEP
  
  384:FiME7FL3u3M1FsplSUE+rFgMih/d7YddMhYuDmcvb/kx2HJFkILyfv:3Ezu8AbHrFgZj0dd1uacAxkJF+
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence