b55d161f45249dfb1ff841bf94aa88e0ab2bfde3c87fa2c81282c51fdc233f56 | Triage

Sharing

General

Target

d4660334bd922c02068fa764044a9992_JaffaCakes118
Size

74KB
Sample

240908-p2m3saxamm
MD5

d4660334bd922c02068fa764044a9992
SHA1

32ba9be736fdbc2be48aa869723b6de016893205
SHA256

b55d161f45249dfb1ff841bf94aa88e0ab2bfde3c87fa2c81282c51fdc233f56
SHA512

c95f524c6bed0736bba27468569ead5796f4443d1140b97b1b86d15ec69c1dcdb3603fe266d365b35763acfa589eba91b9bcc1b5cdda4bbd429fd7826ba7410d
SSDEEP

1536:/0qesbzwKtwnck75BEwKS/rcpKxcNMZMdQiz8J42QehlyxsPYSMtM/:/0qh5t6ckQwvrcpKCNMSii4JjQ2FZyM/

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d4660334bd922c02068fa764044a9992_JaffaCakes118
- Size
  
  74KB
- MD5
  
  d4660334bd922c02068fa764044a9992
- SHA1
  
  32ba9be736fdbc2be48aa869723b6de016893205
- SHA256
  
  b55d161f45249dfb1ff841bf94aa88e0ab2bfde3c87fa2c81282c51fdc233f56
- SHA512
  
  c95f524c6bed0736bba27468569ead5796f4443d1140b97b1b86d15ec69c1dcdb3603fe266d365b35763acfa589eba91b9bcc1b5cdda4bbd429fd7826ba7410d
- SSDEEP
  
  1536:/0qesbzwKtwnck75BEwKS/rcpKxcNMZMdQiz8J42QehlyxsPYSMtM/:/0qh5t6ckQwvrcpKCNMSii4JjQ2FZyM/
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence