3149aa572bf755c55129053e377b715adaed9b9910f8ffa81be52303189eea86 | Triage

Sharing

General

Target

da3f0fcf4b69adfc76a7f8a9dffa485c_JaffaCakes118
Size

107KB
Sample

240911-nj8fbsxekn
MD5

da3f0fcf4b69adfc76a7f8a9dffa485c
SHA1

0d528b8f45a23dbcc9568918052f94caf05cb0b1
SHA256

3149aa572bf755c55129053e377b715adaed9b9910f8ffa81be52303189eea86
SHA512

06c144a25bd06ac8cf6af1fa3c62b1bbe561d3413ae9e84d4b7d84ebcad3cd987cf3af7f2ac4c9b2be7af3b847640b80f36da2b1196b3fd29140d0d73f0e4b45
SSDEEP

1536:K4qY4QaSBllB/UqaQiNaUg4ZPlSG5gHFTc3P3zvY5vo:R4LS32pIUgKg+gH2PM5vo

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  da3f0fcf4b69adfc76a7f8a9dffa485c_JaffaCakes118
- Size
  
  107KB
- MD5
  
  da3f0fcf4b69adfc76a7f8a9dffa485c
- SHA1
  
  0d528b8f45a23dbcc9568918052f94caf05cb0b1
- SHA256
  
  3149aa572bf755c55129053e377b715adaed9b9910f8ffa81be52303189eea86
- SHA512
  
  06c144a25bd06ac8cf6af1fa3c62b1bbe561d3413ae9e84d4b7d84ebcad3cd987cf3af7f2ac4c9b2be7af3b847640b80f36da2b1196b3fd29140d0d73f0e4b45
- SSDEEP
  
  1536:K4qY4QaSBllB/UqaQiNaUg4ZPlSG5gHFTc3P3zvY5vo:R4LS32pIUgKg+gH2PM5vo
Score

7^/10

persistence discovery
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence