37fb2e63abf737bc769a925282ea5b7da5c40ae43f5998a1f61cf841c14811ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4aac29cf454eed690ffbf19e601d11e_JaffaCakes118
Size

262KB
Sample

240908-stlfrstbkp
MD5

d4aac29cf454eed690ffbf19e601d11e
SHA1

ab718bee41761e9edc0d29d8b4fda81b00086696
SHA256

37fb2e63abf737bc769a925282ea5b7da5c40ae43f5998a1f61cf841c14811ee
SHA512

f33dd24735f5ddedb06c9d39275d8376e2e82dab67bc2c9ed5cb3759e95bfc54a878334ede25baa47e9495a02f50be843115da74a49f2ecfb49988f68914cd6c
SSDEEP

6144:QVNmOsfZCAxRGf6sL1taLP5W8JLaQ+8ta/eQ:Q0CAxRGrL1tE6LYa2

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d4aac29cf454eed690ffbf19e601d11e_JaffaCakes118
- Size
  
  262KB
- MD5
  
  d4aac29cf454eed690ffbf19e601d11e
- SHA1
  
  ab718bee41761e9edc0d29d8b4fda81b00086696
- SHA256
  
  37fb2e63abf737bc769a925282ea5b7da5c40ae43f5998a1f61cf841c14811ee
- SHA512
  
  f33dd24735f5ddedb06c9d39275d8376e2e82dab67bc2c9ed5cb3759e95bfc54a878334ede25baa47e9495a02f50be843115da74a49f2ecfb49988f68914cd6c
- SSDEEP
  
  6144:QVNmOsfZCAxRGf6sL1taLP5W8JLaQ+8ta/eQ:Q0CAxRGrL1tE6LYa2
Score

7^/10

persistence discovery
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2