58cd4cc868bef38a650a3ec3d0be0b86b5ac7b0ecae24b0fe6bd99188802fa8a | Triage

Sharing

General

Target

eac0828117663e06a417ee611bbbc0d7_JaffaCakes118
Size

136KB
Sample

240919-g5bj6avfjp
MD5

eac0828117663e06a417ee611bbbc0d7
SHA1

71511cf18e2bef83e90ca52a001b7e206a60741c
SHA256

58cd4cc868bef38a650a3ec3d0be0b86b5ac7b0ecae24b0fe6bd99188802fa8a
SHA512

5d4c3617480904b08a649261ffdef9db2188259c658186eb5d2f90494ecc182638679a98d025e63dabdb3089a34d6b2872fe19eccc00bee40c7dc15c5e1e9c3f
SSDEEP

3072:GozrS5Wr9vBCc0OOmVHEJdq9AXNliWik7chwze91:PS09vBLrVkJdqw1zFeL

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  eac0828117663e06a417ee611bbbc0d7_JaffaCakes118
- Size
  
  136KB
- MD5
  
  eac0828117663e06a417ee611bbbc0d7
- SHA1
  
  71511cf18e2bef83e90ca52a001b7e206a60741c
- SHA256
  
  58cd4cc868bef38a650a3ec3d0be0b86b5ac7b0ecae24b0fe6bd99188802fa8a
- SHA512
  
  5d4c3617480904b08a649261ffdef9db2188259c658186eb5d2f90494ecc182638679a98d025e63dabdb3089a34d6b2872fe19eccc00bee40c7dc15c5e1e9c3f
- SSDEEP
  
  3072:GozrS5Wr9vBCc0OOmVHEJdq9AXNliWik7chwze91:PS09vBLrVkJdqw1zFeL
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2