8ef1acdcda0091fcf52f35c3f87d6d4a7974ae0bdff1ed098282887499a00be9 | Triage

Sharing

General

Target

d00919620e236c5c4dc69a7694910570_JaffaCakes118
Size

47KB
Sample

240906-vm8zlaxhpl
MD5

d00919620e236c5c4dc69a7694910570
SHA1

89de3bfc901b1ecb9f24c8f0fb0eef866feb3729
SHA256

8ef1acdcda0091fcf52f35c3f87d6d4a7974ae0bdff1ed098282887499a00be9
SHA512

71e65c31bcc84e4875552e4682b07d2ab3bd863b8a98adb6ccbacc196e587e5cb51b24a8528c6a3b7ce7f8e3941582ba5bac87b18e7601388f830e3d81d180e4
SSDEEP

768:qh/Rwfolgs0SOXUoRliNjc806Fw4K8dHzOr1NASxgIg1Q3DcbxKRrP5VCi:qh/eQlgs0Sfe57Nb8dHzMjASxnggDc6x

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d00919620e236c5c4dc69a7694910570_JaffaCakes118
- Size
  
  47KB
- MD5
  
  d00919620e236c5c4dc69a7694910570
- SHA1
  
  89de3bfc901b1ecb9f24c8f0fb0eef866feb3729
- SHA256
  
  8ef1acdcda0091fcf52f35c3f87d6d4a7974ae0bdff1ed098282887499a00be9
- SHA512
  
  71e65c31bcc84e4875552e4682b07d2ab3bd863b8a98adb6ccbacc196e587e5cb51b24a8528c6a3b7ce7f8e3941582ba5bac87b18e7601388f830e3d81d180e4
- SSDEEP
  
  768:qh/Rwfolgs0SOXUoRliNjc806Fw4K8dHzOr1NASxgIg1Q3DcbxKRrP5VCi:qh/eQlgs0Sfe57Nb8dHzMjASxnggDc6x
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence