101e4cb078a10eadde0cea41607d2d22053df490b09bdc0951bfa004521f384b | Triage

Sharing

General

Target

d1bd1bb5cd06e0e576582feda5a8bd0b_JaffaCakes118
Size

24KB
Sample

240907-mplyvazcpn
MD5

d1bd1bb5cd06e0e576582feda5a8bd0b
SHA1

e4722fc20d4e05605c9711a5f9bf6c2217cb6815
SHA256

101e4cb078a10eadde0cea41607d2d22053df490b09bdc0951bfa004521f384b
SHA512

495af30d252de186b23ac7c2c6cd44a23fa523a2df35287a70393356a4503558778258a9ae8b30972d839d136ff0b997246daf19eaa2fb6d4a289f1ab0fbb2a2
SSDEEP

384:peDTS++MUiQ+dPwKQspcu2is+nwwZZYzFY/j3Obysdm5pwFLUTDlyuU:peDWdMG+pwY12i3YO3OusEpwhUwl

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d1bd1bb5cd06e0e576582feda5a8bd0b_JaffaCakes118
- Size
  
  24KB
- MD5
  
  d1bd1bb5cd06e0e576582feda5a8bd0b
- SHA1
  
  e4722fc20d4e05605c9711a5f9bf6c2217cb6815
- SHA256
  
  101e4cb078a10eadde0cea41607d2d22053df490b09bdc0951bfa004521f384b
- SHA512
  
  495af30d252de186b23ac7c2c6cd44a23fa523a2df35287a70393356a4503558778258a9ae8b30972d839d136ff0b997246daf19eaa2fb6d4a289f1ab0fbb2a2
- SSDEEP
  
  384:peDTS++MUiQ+dPwKQspcu2is+nwwZZYzFY/j3Obysdm5pwFLUTDlyuU:peDWdMG+pwY12i3YO3OusEpwhUwl
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence