d09b2b35daa47ea25db9ed2c566b7d2c282cbf4fe23a1547d51b7c20c5437680 | Triage

Sharing

General

Target

eaa7aceb7530b3778e4badab6b873445_JaffaCakes118
Size

32KB
Sample

240919-fyxy5ssgpl
MD5

eaa7aceb7530b3778e4badab6b873445
SHA1

0faf40056414f27feed53aa5f12430a5d9de8fd4
SHA256

d09b2b35daa47ea25db9ed2c566b7d2c282cbf4fe23a1547d51b7c20c5437680
SHA512

1baa371c1c0dae14248ff8beaa5411fd7119489d39ece5635ca88806bbcec852920d211a7d930f616ce8dc4bbd4845ed7d55637a6fae688af380cfdaa97ad192
SSDEEP

384:jfgoe2XjWUVM/SOdXvBkeE0vMpFegH4O1n19DeuvS:b62XjW3ZBkjAeFxzLDhvS

Score

8^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  eaa7aceb7530b3778e4badab6b873445_JaffaCakes118
- Size
  
  32KB
- MD5
  
  eaa7aceb7530b3778e4badab6b873445
- SHA1
  
  0faf40056414f27feed53aa5f12430a5d9de8fd4
- SHA256
  
  d09b2b35daa47ea25db9ed2c566b7d2c282cbf4fe23a1547d51b7c20c5437680
- SHA512
  
  1baa371c1c0dae14248ff8beaa5411fd7119489d39ece5635ca88806bbcec852920d211a7d930f616ce8dc4bbd4845ed7d55637a6fae688af380cfdaa97ad192
- SSDEEP
  
  384:jfgoe2XjWUVM/SOdXvBkeE0vMpFegH4O1n19DeuvS:b62XjW3ZBkjAeFxzLDhvS
Score

8^/10

defense_evasion discovery persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Indicator Removal: Clear Persistence
  remove IFEO.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Indicator Removal

Clear Persistence

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence