5a16dc37bbd2dc4f4c37a1291113d48b90adb5895aa1e2a8b82aa15b5e833a13 | Triage

Sharing

General

Target

e06d4c35c8f7a216200e09343ce47280_JaffaCakes118
Size

457KB
Sample

240914-sb8tcazgke
MD5

e06d4c35c8f7a216200e09343ce47280
SHA1

926b034f9da387563012161fcd0f310edf30f1fa
SHA256

5a16dc37bbd2dc4f4c37a1291113d48b90adb5895aa1e2a8b82aa15b5e833a13
SHA512

15ec581366c0a5726ff571c41214e70a6c71dcdaa85a531f346b4b4aac5a3fa0c0c8afb93cdc174bd50fffc82b681f42f5c337bbcc7a4afc8ee98d7d98519745
SSDEEP

12288:C+kOfeCHCGyCzkDxqO/hwAWLFfwhPhh4V/:6uCGyCzk9d/elfIUB

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e06d4c35c8f7a216200e09343ce47280_JaffaCakes118
- Size
  
  457KB
- MD5
  
  e06d4c35c8f7a216200e09343ce47280
- SHA1
  
  926b034f9da387563012161fcd0f310edf30f1fa
- SHA256
  
  5a16dc37bbd2dc4f4c37a1291113d48b90adb5895aa1e2a8b82aa15b5e833a13
- SHA512
  
  15ec581366c0a5726ff571c41214e70a6c71dcdaa85a531f346b4b4aac5a3fa0c0c8afb93cdc174bd50fffc82b681f42f5c337bbcc7a4afc8ee98d7d98519745
- SSDEEP
  
  12288:C+kOfeCHCGyCzkDxqO/hwAWLFfwhPhh4V/:6uCGyCzk9d/elfIUB
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence