b87650a29f1de493b5638a53bbbb23d7835a678f240b082c3d4016b01fe46174 | Triage

Sharing

General

Target

c9625c713ad0dc3fa94f6990e4ce594c_JaffaCakes118
Size

372KB
Sample

240829-w6jdqaxblq
MD5

c9625c713ad0dc3fa94f6990e4ce594c
SHA1

c415f9afebf4feb375d9c8071691846ef627b269
SHA256

b87650a29f1de493b5638a53bbbb23d7835a678f240b082c3d4016b01fe46174
SHA512

fc8fd76450ba47df708a6b7f55f5d410a01c30c0ecddbfa2f880d19058014368262813caf273f86e34b298da77517d18c7e107bd5552e9ababf6d42ec1c4365f
SSDEEP

6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuaPUD8XYPK9sQxonoRjfs4hli0YTg6k8jTOc:NtKe6Zv23YdAPaPUDLPZXwjkyAHk83O4

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c9625c713ad0dc3fa94f6990e4ce594c_JaffaCakes118
- Size
  
  372KB
- MD5
  
  c9625c713ad0dc3fa94f6990e4ce594c
- SHA1
  
  c415f9afebf4feb375d9c8071691846ef627b269
- SHA256
  
  b87650a29f1de493b5638a53bbbb23d7835a678f240b082c3d4016b01fe46174
- SHA512
  
  fc8fd76450ba47df708a6b7f55f5d410a01c30c0ecddbfa2f880d19058014368262813caf273f86e34b298da77517d18c7e107bd5552e9ababf6d42ec1c4365f
- SSDEEP
  
  6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuaPUD8XYPK9sQxonoRjfs4hli0YTg6k8jTOc:NtKe6Zv23YdAPaPUDLPZXwjkyAHk83O4
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence