a534df8909470bb98c48a598b2aae60b798daf5c6cf33f27662e9dc7870c2ff1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5fa857cb78fd15352ae5e47ddd5dfa_JaffaCakes118
Size

692KB
Sample

240919-cawvdsvdrm
MD5

ea5fa857cb78fd15352ae5e47ddd5dfa
SHA1

2d904dd1dd3e0b71449b3d0ab13f204048d0eb66
SHA256

a534df8909470bb98c48a598b2aae60b798daf5c6cf33f27662e9dc7870c2ff1
SHA512

1130b76b66e4dceffa45e7721deb7e43c774371f88ce24822b1bc3e383585f4be975b0873cae384be6ac219dec01f91c42efc55545356cbaa66b4a78abc6819c
SSDEEP

12288:PWysr6EqnDphL5RAPEzRguUDjXtUzf7by+qhH8NF3Z4mxx6DqVTVOCUG:PWysWdL5R08F2jXmzf1quNQmXBVTzj

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ea5fa857cb78fd15352ae5e47ddd5dfa_JaffaCakes118
- Size
  
  692KB
- MD5
  
  ea5fa857cb78fd15352ae5e47ddd5dfa
- SHA1
  
  2d904dd1dd3e0b71449b3d0ab13f204048d0eb66
- SHA256
  
  a534df8909470bb98c48a598b2aae60b798daf5c6cf33f27662e9dc7870c2ff1
- SHA512
  
  1130b76b66e4dceffa45e7721deb7e43c774371f88ce24822b1bc3e383585f4be975b0873cae384be6ac219dec01f91c42efc55545356cbaa66b4a78abc6819c
- SSDEEP
  
  12288:PWysr6EqnDphL5RAPEzRguUDjXtUzf7by+qhH8NF3Z4mxx6DqVTVOCUG:PWysWdL5R08F2jXmzf1quNQmXBVTzj
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence