64726966d27cd4a6dabbf202efdf818b32a7731394c864dd90b4a167f80ca416 | Triage

Sharing

General

Target

e2239d50b657be958faf9ae49310e1c7_JaffaCakes118
Size

104KB
Sample

240915-k116sswerr
MD5

e2239d50b657be958faf9ae49310e1c7
SHA1

60f0828436b8c9d9bd51fcdb16f63cb49902b481
SHA256

64726966d27cd4a6dabbf202efdf818b32a7731394c864dd90b4a167f80ca416
SHA512

1b680e4311b49294b6caaad5581366afd9376eafc16620f9475a55218b2e025dd1b28f5d3830374613af3f4082e3114c74c3c88f514a01db51cb6ccd75a4578b
SSDEEP

1536:hyDNYq3OUna73741gMCjxbKxmAI6EUv5/pI5GnpS73LYXp8okFLcq2A3TJa6YEG2:8Q41gPgxmADv5/pI3YXeoYz22Tk5EGE

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  e2239d50b657be958faf9ae49310e1c7_JaffaCakes118
- Size
  
  104KB
- MD5
  
  e2239d50b657be958faf9ae49310e1c7
- SHA1
  
  60f0828436b8c9d9bd51fcdb16f63cb49902b481
- SHA256
  
  64726966d27cd4a6dabbf202efdf818b32a7731394c864dd90b4a167f80ca416
- SHA512
  
  1b680e4311b49294b6caaad5581366afd9376eafc16620f9475a55218b2e025dd1b28f5d3830374613af3f4082e3114c74c3c88f514a01db51cb6ccd75a4578b
- SSDEEP
  
  1536:hyDNYq3OUna73741gMCjxbKxmAI6EUv5/pI5GnpS73LYXp8okFLcq2A3TJa6YEG2:8Q41gPgxmADv5/pI3YXeoYz22Tk5EGE
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence