571a5942ef40ec75c145eb64884bba1f0b7d4ac30673c616cb3b4fafaa8ad26c | Triage

Sharing

General

Target

dbb0dd730ea16dfea48d98ae3175d906_JaffaCakes118
Size

28KB
Sample

240912-dgl47sxgpn
MD5

dbb0dd730ea16dfea48d98ae3175d906
SHA1

e2d49fd01eddf393d7b130164520c5ecbf831dc8
SHA256

571a5942ef40ec75c145eb64884bba1f0b7d4ac30673c616cb3b4fafaa8ad26c
SHA512

d85b4a5e2e1605b485e53406f03cab00047096ad54d67a197150b0d7b68248a6e8614c014dcf5373d609f1cce9fea7bca2a95d7171ec2aae68df9188ab787782
SSDEEP

384:UDXAzAm3cfXXLGawxng0HawNa4IOO4MoQVkQzsjYfKaIZQuJmRQEaf8VKJVKCv/5:UU/MfnL8g0HZ5I9zVphFEMKJVKk4xs

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  dbb0dd730ea16dfea48d98ae3175d906_JaffaCakes118
- Size
  
  28KB
- MD5
  
  dbb0dd730ea16dfea48d98ae3175d906
- SHA1
  
  e2d49fd01eddf393d7b130164520c5ecbf831dc8
- SHA256
  
  571a5942ef40ec75c145eb64884bba1f0b7d4ac30673c616cb3b4fafaa8ad26c
- SHA512
  
  d85b4a5e2e1605b485e53406f03cab00047096ad54d67a197150b0d7b68248a6e8614c014dcf5373d609f1cce9fea7bca2a95d7171ec2aae68df9188ab787782
- SSDEEP
  
  384:UDXAzAm3cfXXLGawxng0HawNa4IOO4MoQVkQzsjYfKaIZQuJmRQEaf8VKJVKCv/5:UU/MfnL8g0HZ5I9zVphFEMKJVKk4xs
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence