fc89b62f6b40de680b069a3802fda454759ca91efe1a5dd783f567fd9f0d569a | Triage

Sharing

General

Target

d46f5774ca18419c78ce3ec50857dd14_JaffaCakes118
Size

68KB
Sample

240908-qd2rpszemc
MD5

d46f5774ca18419c78ce3ec50857dd14
SHA1

a492ad93fd98ea38d2bb5e5a600999355ffe48e2
SHA256

fc89b62f6b40de680b069a3802fda454759ca91efe1a5dd783f567fd9f0d569a
SHA512

cbba8ff94507c6f267013881a85b0c74426ed40b90dfb182ca6c4a4393e4133eb185cab73c04eb8e06c1901c3f2d61271f416bdb86d3734371fa003e9036b415
SSDEEP

1536:FNxU+W+73uSpoo3e/8+dcr2yS72WboWWWY9l:NU+W+qNo3e9Sy/9sWWWY/

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d46f5774ca18419c78ce3ec50857dd14_JaffaCakes118
- Size
  
  68KB
- MD5
  
  d46f5774ca18419c78ce3ec50857dd14
- SHA1
  
  a492ad93fd98ea38d2bb5e5a600999355ffe48e2
- SHA256
  
  fc89b62f6b40de680b069a3802fda454759ca91efe1a5dd783f567fd9f0d569a
- SHA512
  
  cbba8ff94507c6f267013881a85b0c74426ed40b90dfb182ca6c4a4393e4133eb185cab73c04eb8e06c1901c3f2d61271f416bdb86d3734371fa003e9036b415
- SSDEEP
  
  1536:FNxU+W+73uSpoo3e/8+dcr2yS72WboWWWY9l:NU+W+qNo3e9Sy/9sWWWY/
Score

8^/10

discovery persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence