2e4bf369b89361ab41388590cf8358c47251cd5e7c0ee87c2b9257fb24b09862 | Triage

Sharing

General

Target

dece450533d288d2d0da657156893412_JaffaCakes118
Size

74KB
Sample

240913-yq3hrswblk
MD5

dece450533d288d2d0da657156893412
SHA1

1c9191939365cd02396ed4f2c2ee9b0328873267
SHA256

2e4bf369b89361ab41388590cf8358c47251cd5e7c0ee87c2b9257fb24b09862
SHA512

2c5c690cf07b131050f3bc12f46295bc795dfefd0016573dd0662e4e898ac913d9a5df2b120fd0df466fd532806074981545e5b25818eb0be275aeb618165178
SSDEEP

768:2sKRawwQE0ChoYXJpOPGC/jcnV6uROALfIsnD+U//UTvP2oVcehAHUF1BbtgAjuJ:2TIhdX7ojc3RffD3/GvPDe58nDR5g

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  dece450533d288d2d0da657156893412_JaffaCakes118
- Size
  
  74KB
- MD5
  
  dece450533d288d2d0da657156893412
- SHA1
  
  1c9191939365cd02396ed4f2c2ee9b0328873267
- SHA256
  
  2e4bf369b89361ab41388590cf8358c47251cd5e7c0ee87c2b9257fb24b09862
- SHA512
  
  2c5c690cf07b131050f3bc12f46295bc795dfefd0016573dd0662e4e898ac913d9a5df2b120fd0df466fd532806074981545e5b25818eb0be275aeb618165178
- SSDEEP
  
  768:2sKRawwQE0ChoYXJpOPGC/jcnV6uROALfIsnD+U//UTvP2oVcehAHUF1BbtgAjuJ:2TIhdX7ojc3RffD3/GvPDe58nDR5g
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence