903e27b6702a2d5074d9846e76b32a2d3b31ccc4ee33ea9866e04e56225cc931 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1037957cb3b594329e801e4ea5c1b97_JaffaCakes118
Size

619KB
Sample

240907-efh7latepf
MD5

d1037957cb3b594329e801e4ea5c1b97
SHA1

bafcee4504ac3b82267a4748f65fe4bb60fcb51e
SHA256

903e27b6702a2d5074d9846e76b32a2d3b31ccc4ee33ea9866e04e56225cc931
SHA512

18d9262823cb6f48125cbb1e1db97ab36150e55099c83d68e526180f3409629d9bbfadb391a2cb72b20bd9b701125bfd6df6ebd80ff9c1e28697fac3eb2d9a26
SSDEEP

12288:2RtwxoYQbOgnTs0ShFO2PahRtwxoYQbOgnTs0ShFO2Pa7:2XJYsdnlSXONXJYsdnlSXO3

Score

7^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  d1037957cb3b594329e801e4ea5c1b97_JaffaCakes118
- Size
  
  619KB
- MD5
  
  d1037957cb3b594329e801e4ea5c1b97
- SHA1
  
  bafcee4504ac3b82267a4748f65fe4bb60fcb51e
- SHA256
  
  903e27b6702a2d5074d9846e76b32a2d3b31ccc4ee33ea9866e04e56225cc931
- SHA512
  
  18d9262823cb6f48125cbb1e1db97ab36150e55099c83d68e526180f3409629d9bbfadb391a2cb72b20bd9b701125bfd6df6ebd80ff9c1e28697fac3eb2d9a26
- SSDEEP
  
  12288:2RtwxoYQbOgnTs0ShFO2PahRtwxoYQbOgnTs0ShFO2Pa7:2XJYsdnlSXONXJYsdnlSXO3
Score

7^/10

defense_evasion discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence