1273ef2078166c2434c57f1c52161083f4a062f3d88f6f6ab845d0374e734c17 | Triage

Sharing

General

Target

d64b9f6369b3d60162abfc46506bfa46_JaffaCakes118
Size

86KB
Sample

240909-pgsgrszcma
MD5

d64b9f6369b3d60162abfc46506bfa46
SHA1

b2cec7b66ba4abe9405b829e8a94111f861546d3
SHA256

1273ef2078166c2434c57f1c52161083f4a062f3d88f6f6ab845d0374e734c17
SHA512

7a2c11ec0651b1037c32f0f6216f318b2e174ac3eb9be47d7225af06c47a08c347635c194ef4f467ed210d627f66d491d88f11d5170b727728cf525e5c65a37b
SSDEEP

1536:PNiqmsQ71EgXp6pupktRsc//////UxNVki0ipzS6s7snLoLaUjYoCR3y:HaOy6pREc//////8NVMiRSOPcYoCR3y

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d64b9f6369b3d60162abfc46506bfa46_JaffaCakes118
- Size
  
  86KB
- MD5
  
  d64b9f6369b3d60162abfc46506bfa46
- SHA1
  
  b2cec7b66ba4abe9405b829e8a94111f861546d3
- SHA256
  
  1273ef2078166c2434c57f1c52161083f4a062f3d88f6f6ab845d0374e734c17
- SHA512
  
  7a2c11ec0651b1037c32f0f6216f318b2e174ac3eb9be47d7225af06c47a08c347635c194ef4f467ed210d627f66d491d88f11d5170b727728cf525e5c65a37b
- SSDEEP
  
  1536:PNiqmsQ71EgXp6pupktRsc//////UxNVki0ipzS6s7snLoLaUjYoCR3y:HaOy6pREc//////8NVMiRSOPcYoCR3y
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence