747b1fa2d2f6b786660d77ae7d2795c260d904fd83b575404a4dfe9866e53324 | Triage

Sharing

General

Target

d20cc50fa87f5f601ca82437ee8926c8_JaffaCakes118
Size

697KB
Sample

240907-qvxt3swgpn
MD5

d20cc50fa87f5f601ca82437ee8926c8
SHA1

065d6e37f6cdf7014fa57bc9fa080625558a0dcd
SHA256

747b1fa2d2f6b786660d77ae7d2795c260d904fd83b575404a4dfe9866e53324
SHA512

bdade4ad18ccaf1b6526ed66a7cc228d9c5b83021059086eb218b65f8407cc2ac5d388e56fed28a3819e639f516836a5ca87b15280447a4151af4dfadbca58dc
SSDEEP

12288:UsA1mIRjZp9IyTFCMXSWEOIsgsg+8nS+KXVG8fXFGkvv4uvB1o0KufFiPu:UsnIPp9IyTFC00OIswnS+uw2XFGk4EBh

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d20cc50fa87f5f601ca82437ee8926c8_JaffaCakes118
- Size
  
  697KB
- MD5
  
  d20cc50fa87f5f601ca82437ee8926c8
- SHA1
  
  065d6e37f6cdf7014fa57bc9fa080625558a0dcd
- SHA256
  
  747b1fa2d2f6b786660d77ae7d2795c260d904fd83b575404a4dfe9866e53324
- SHA512
  
  bdade4ad18ccaf1b6526ed66a7cc228d9c5b83021059086eb218b65f8407cc2ac5d388e56fed28a3819e639f516836a5ca87b15280447a4151af4dfadbca58dc
- SSDEEP
  
  12288:UsA1mIRjZp9IyTFCMXSWEOIsgsg+8nS+KXVG8fXFGkvv4uvB1o0KufFiPu:UsnIPp9IyTFC00OIswnS+uw2XFGk4EBh
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence