b1fb24e3c566427f0db98a56da92368168304a3ae1a388898c040f6618953f6f | Triage

Sharing

General

Target

d515fa84df1722876aa4a9d73fcbe642_JaffaCakes118
Size

135KB
Sample

240908-zvw28avfkj
MD5

d515fa84df1722876aa4a9d73fcbe642
SHA1

50b31be86b86900d0e043223037f07c6779db799
SHA256

b1fb24e3c566427f0db98a56da92368168304a3ae1a388898c040f6618953f6f
SHA512

98ed8aaf10e8275518a342e321a21f7bdd70ba521b80debd62de814d109719dd6ad49d770493b367a5598109a75d7d76d52637696ae0765e4598b326c192975f
SSDEEP

3072:aIP7KyJDSznH9nP16SXf/3koWxTPEsvW7Y35v+bWuXYvAQ4Sy9Jmg:7j/Md5v/3WxTPrJv+iuI4QDGmg

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d515fa84df1722876aa4a9d73fcbe642_JaffaCakes118
- Size
  
  135KB
- MD5
  
  d515fa84df1722876aa4a9d73fcbe642
- SHA1
  
  50b31be86b86900d0e043223037f07c6779db799
- SHA256
  
  b1fb24e3c566427f0db98a56da92368168304a3ae1a388898c040f6618953f6f
- SHA512
  
  98ed8aaf10e8275518a342e321a21f7bdd70ba521b80debd62de814d109719dd6ad49d770493b367a5598109a75d7d76d52637696ae0765e4598b326c192975f
- SSDEEP
  
  3072:aIP7KyJDSznH9nP16SXf/3koWxTPEsvW7Y35v+bWuXYvAQ4Sy9Jmg:7j/Md5v/3WxTPrJv+iuI4QDGmg
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2