6ecef56615129397fa44f3a34eef8afc0b80bef6cec76ac371890000e540d012 | Triage

Sharing

General

Target

ea34a3e7fb370f4c4bcb4539982ae713_JaffaCakes118
Size

297KB
Sample

240918-3xj28azenq
MD5

ea34a3e7fb370f4c4bcb4539982ae713
SHA1

9cae4792136ada03784574df0829bf122aef4cc2
SHA256

6ecef56615129397fa44f3a34eef8afc0b80bef6cec76ac371890000e540d012
SHA512

f931aef71bc5bd96d277eb160a6cccbe90cb82a98c76e15909eb27da56e40354becfdfcb990a8c70ead97fe3b392baa064de0bf0985966e0608ee2d8c1284f09
SSDEEP

6144:cPzHT72Y0S4zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOKPECYeixlYGicn:c7z7SSrYsY1UMqMZJYSN7wbstOK8fve4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ea34a3e7fb370f4c4bcb4539982ae713_JaffaCakes118
- Size
  
  297KB
- MD5
  
  ea34a3e7fb370f4c4bcb4539982ae713
- SHA1
  
  9cae4792136ada03784574df0829bf122aef4cc2
- SHA256
  
  6ecef56615129397fa44f3a34eef8afc0b80bef6cec76ac371890000e540d012
- SHA512
  
  f931aef71bc5bd96d277eb160a6cccbe90cb82a98c76e15909eb27da56e40354becfdfcb990a8c70ead97fe3b392baa064de0bf0985966e0608ee2d8c1284f09
- SSDEEP
  
  6144:cPzHT72Y0S4zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOKPECYeixlYGicn:c7z7SSrYsY1UMqMZJYSN7wbstOK8fve4
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2