69c1f42d2f5c891888457290f0a5c8886ed7473e7b208f4116e89d4506682de7 | Triage

Sharing

General

Target

d5053d2b6387251d7b4d147cd702015b_JaffaCakes118
Size

990KB
Sample

240908-ynf7ravgna
MD5

d5053d2b6387251d7b4d147cd702015b
SHA1

dfa5968c631938170851e9cb4d1318c2be73fa22
SHA256

69c1f42d2f5c891888457290f0a5c8886ed7473e7b208f4116e89d4506682de7
SHA512

c6de7a383e851b6d1cc88386e57ad133906df04a4a96458c6c16cc6ac9e31f2a6ca6eec4a17feab4f2cfc89c803fa4da7e83ba40cd5baec324474226d31ba98c
SSDEEP

24576:J/lfyQyrWTcsLTAL5g4yQxmy5t7Ufma/jesV38B4:J/tErWosmy6t7UjesV3u4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d5053d2b6387251d7b4d147cd702015b_JaffaCakes118
- Size
  
  990KB
- MD5
  
  d5053d2b6387251d7b4d147cd702015b
- SHA1
  
  dfa5968c631938170851e9cb4d1318c2be73fa22
- SHA256
  
  69c1f42d2f5c891888457290f0a5c8886ed7473e7b208f4116e89d4506682de7
- SHA512
  
  c6de7a383e851b6d1cc88386e57ad133906df04a4a96458c6c16cc6ac9e31f2a6ca6eec4a17feab4f2cfc89c803fa4da7e83ba40cd5baec324474226d31ba98c
- SSDEEP
  
  24576:J/lfyQyrWTcsLTAL5g4yQxmy5t7Ufma/jesV38B4:J/tErWosmy6t7UjesV3u4
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence