401f34c3264b38d24bec7385bbdf51015b3fce11974d83055d1567ef9994c842 | Triage

Sharing

General

Target

e2388cfadaee0d10fd146f056db508af_JaffaCakes118
Size

28KB
Sample

240915-l1l8baxgmb
MD5

e2388cfadaee0d10fd146f056db508af
SHA1

136012d2c88ca163d6beb9ac771598aef56118c4
SHA256

401f34c3264b38d24bec7385bbdf51015b3fce11974d83055d1567ef9994c842
SHA512

1223fc9b10af2ee49d5923c044843192c93c7ad4bc773211eefe28bcb181f7d86f06564424c8e758cb013a9b4e497b35fbadb7cf0a09c76b5077b5d7471c772b
SSDEEP

768:+X0PkZruk6/OxmISGsmoHX1Xe4VHzlsZkatA0oKYT:+X0PkZKk6mxJn8FXBVHzl0oKYT

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e2388cfadaee0d10fd146f056db508af_JaffaCakes118
- Size
  
  28KB
- MD5
  
  e2388cfadaee0d10fd146f056db508af
- SHA1
  
  136012d2c88ca163d6beb9ac771598aef56118c4
- SHA256
  
  401f34c3264b38d24bec7385bbdf51015b3fce11974d83055d1567ef9994c842
- SHA512
  
  1223fc9b10af2ee49d5923c044843192c93c7ad4bc773211eefe28bcb181f7d86f06564424c8e758cb013a9b4e497b35fbadb7cf0a09c76b5077b5d7471c772b
- SSDEEP
  
  768:+X0PkZruk6/OxmISGsmoHX1Xe4VHzlsZkatA0oKYT:+X0PkZKk6mxJn8FXBVHzl0oKYT
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence