296d198400b33f42d759264e836ba0838879fae652c4b413e6ecb04fae3adbd7 | Triage

Sharing

General

Target

dd8df77ade930b2a03a2927a167225b8_JaffaCakes118
Size

352KB
Sample

240913-dqbd3a1hmf
MD5

dd8df77ade930b2a03a2927a167225b8
SHA1

33d7c6c302df3c92812ce37c72850841115a5910
SHA256

296d198400b33f42d759264e836ba0838879fae652c4b413e6ecb04fae3adbd7
SHA512

94e3e798be4ba3e006f632d1cd281fc28824eddc8ddab0df718ba541307c14941880fc7828d4fc9f7364793746b5464bdd24566166a1d5531e54a0a5bfc27322
SSDEEP

3072:KG4v++S8klkvuIQP1fCart2l2EyRmcMaPw7S1Zw2uTmqqWDK+D:KG4v+18klm84l2tHMaGiw8qq1+D

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  dd8df77ade930b2a03a2927a167225b8_JaffaCakes118
- Size
  
  352KB
- MD5
  
  dd8df77ade930b2a03a2927a167225b8
- SHA1
  
  33d7c6c302df3c92812ce37c72850841115a5910
- SHA256
  
  296d198400b33f42d759264e836ba0838879fae652c4b413e6ecb04fae3adbd7
- SHA512
  
  94e3e798be4ba3e006f632d1cd281fc28824eddc8ddab0df718ba541307c14941880fc7828d4fc9f7364793746b5464bdd24566166a1d5531e54a0a5bfc27322
- SSDEEP
  
  3072:KG4v++S8klkvuIQP1fCart2l2EyRmcMaPw7S1Zw2uTmqqWDK+D:KG4v+18klm84l2tHMaGiw8qq1+D
Score

7^/10

discovery persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence