7deb9049aabb6a32dd799e497925874e3931ce6c0a6edf4d1b5880fe71095594 | Triage

Sharing

General

Target

da7955fd3561fd66a804e14893bb706b_JaffaCakes118
Size

24KB
Sample

240911-q1zkvstclk
MD5

da7955fd3561fd66a804e14893bb706b
SHA1

9a9ac4285c70e6d22de8f1978af6f8b186f1a55f
SHA256

7deb9049aabb6a32dd799e497925874e3931ce6c0a6edf4d1b5880fe71095594
SHA512

f12189ca32388e0525fe7a918eba34ef3250f169b78631860280686bb4cfe28b9c27e16bfb69eed7a3d4919aac512ae07c62eed203a91d9a9a11837f59f37418
SSDEEP

384:XHbm57jwjYG403p/8GO1HjM6RlOFmSkfexPhaxNDNvTeYySMRXcnoLCcJer:XwnsYG4CW1HjxymKqZbenS8cnoL3Jer

Score

7^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  da7955fd3561fd66a804e14893bb706b_JaffaCakes118
- Size
  
  24KB
- MD5
  
  da7955fd3561fd66a804e14893bb706b
- SHA1
  
  9a9ac4285c70e6d22de8f1978af6f8b186f1a55f
- SHA256
  
  7deb9049aabb6a32dd799e497925874e3931ce6c0a6edf4d1b5880fe71095594
- SHA512
  
  f12189ca32388e0525fe7a918eba34ef3250f169b78631860280686bb4cfe28b9c27e16bfb69eed7a3d4919aac512ae07c62eed203a91d9a9a11837f59f37418
- SSDEEP
  
  384:XHbm57jwjYG403p/8GO1HjM6RlOFmSkfexPhaxNDNvTeYySMRXcnoLCcJer:XwnsYG4CW1HjxymKqZbenS8cnoL3Jer
Score

7^/10

discovery persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Accessibility Features

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Accessibility Features

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistenceprivilege_escalation