14d39d8cdd9cdad6f44d4b9b65f99a13c95c56ba9a89f32174fd0b2d351349a1 | Triage

Sharing

General

Target

de1af5595f8812fd83f3fa031dee9bc4_JaffaCakes118
Size

1.1MB
Sample

240913-kzdzwaverk
MD5

de1af5595f8812fd83f3fa031dee9bc4
SHA1

0facebac020f8ff1c3a111ee749b7a87e1b47e66
SHA256

14d39d8cdd9cdad6f44d4b9b65f99a13c95c56ba9a89f32174fd0b2d351349a1
SHA512

670012a152038ff22ec47bf357c64ece545457dba66a2f9d4b1d40c487c378c4f29901bad5c3ff62d1322e805f8fa88110e673068dbc69744845dc9ebaf57b6d
SSDEEP

24576:SozqxQKYuUMAyzpdVcFVV1SHXE6papv3b+px5uCiE8k:6QxuXAyzUwX81Lq3u08k

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  de1af5595f8812fd83f3fa031dee9bc4_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  de1af5595f8812fd83f3fa031dee9bc4
- SHA1
  
  0facebac020f8ff1c3a111ee749b7a87e1b47e66
- SHA256
  
  14d39d8cdd9cdad6f44d4b9b65f99a13c95c56ba9a89f32174fd0b2d351349a1
- SHA512
  
  670012a152038ff22ec47bf357c64ece545457dba66a2f9d4b1d40c487c378c4f29901bad5c3ff62d1322e805f8fa88110e673068dbc69744845dc9ebaf57b6d
- SSDEEP
  
  24576:SozqxQKYuUMAyzpdVcFVV1SHXE6papv3b+px5uCiE8k:6QxuXAyzUwX81Lq3u08k
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2