a3ae7f735db39938a86b3df1d07031f94f064912568b350c443b6beaea8cc1da | Triage

Sharing

General

Target

c7c1343b6b6fede4e4a73299088e842b_JaffaCakes118
Size

35KB
Sample

240828-2a24vazaqd
MD5

c7c1343b6b6fede4e4a73299088e842b
SHA1

61da276bdb701239ef880d2e2b1023b8c6ff2980
SHA256

a3ae7f735db39938a86b3df1d07031f94f064912568b350c443b6beaea8cc1da
SHA512

cb2d5a929d673c9fd09f39c395d4b72741c893643554a5af75b856cafaa0a2ee01197dde234362c8bc6b2bcc327647988b21cd989aadda7afca64d31f40a7f77
SSDEEP

768:M4JnucEDTozPAkBRYtYWCSE7uPcErNbeXQ67GKnwIg:MGnBa8j62WCSE7ukihSQ6CKwI

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c7c1343b6b6fede4e4a73299088e842b_JaffaCakes118
- Size
  
  35KB
- MD5
  
  c7c1343b6b6fede4e4a73299088e842b
- SHA1
  
  61da276bdb701239ef880d2e2b1023b8c6ff2980
- SHA256
  
  a3ae7f735db39938a86b3df1d07031f94f064912568b350c443b6beaea8cc1da
- SHA512
  
  cb2d5a929d673c9fd09f39c395d4b72741c893643554a5af75b856cafaa0a2ee01197dde234362c8bc6b2bcc327647988b21cd989aadda7afca64d31f40a7f77
- SSDEEP
  
  768:M4JnucEDTozPAkBRYtYWCSE7uPcErNbeXQ67GKnwIg:MGnBa8j62WCSE7ukihSQ6CKwI
Score

8^/10

discovery persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence