090df4e08f6f6c8f988c6370894e3b2f13bfb24e2e04bc29346896d3655c3370 | Triage

Sharing

General

Target

d108b9b3f33eb9d17fd89099c561047c_JaffaCakes118
Size

136KB
Sample

240907-emta5stfkj
MD5

d108b9b3f33eb9d17fd89099c561047c
SHA1

0cfec9935410fedb1c4357e955ad067ab938c4b6
SHA256

090df4e08f6f6c8f988c6370894e3b2f13bfb24e2e04bc29346896d3655c3370
SHA512

925a15b3e514fb004a4c60ec28db0ae4b9a9615a13f9ba0c63bdd81c9bbb46265d83881fe38f4b2a93e736f264c751ecc20f27e4b7d136ebc342d6df844ccd3d
SSDEEP

3072:0m3+hIflRKqG6idcXJNJaJE/ogqZk6WrGabN0gY/:0C9Ra6idcfg1gqZk6YGabOg4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d108b9b3f33eb9d17fd89099c561047c_JaffaCakes118
- Size
  
  136KB
- MD5
  
  d108b9b3f33eb9d17fd89099c561047c
- SHA1
  
  0cfec9935410fedb1c4357e955ad067ab938c4b6
- SHA256
  
  090df4e08f6f6c8f988c6370894e3b2f13bfb24e2e04bc29346896d3655c3370
- SHA512
  
  925a15b3e514fb004a4c60ec28db0ae4b9a9615a13f9ba0c63bdd81c9bbb46265d83881fe38f4b2a93e736f264c751ecc20f27e4b7d136ebc342d6df844ccd3d
- SSDEEP
  
  3072:0m3+hIflRKqG6idcXJNJaJE/ogqZk6WrGabN0gY/:0C9Ra6idcfg1gqZk6YGabOg4
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2