4567d1e0ceaba11091eb2bc625ef58fc9fd704cebf84cd81c16067ad589e4c8f | Triage

Sharing

General

Target

eab440358f54075b5e222012d0089b28_JaffaCakes118
Size

93KB
Sample

240919-gkqtcatgml
MD5

eab440358f54075b5e222012d0089b28
SHA1

b02be079b6c75fa50e33f233a3bb1aa72e8d2a81
SHA256

4567d1e0ceaba11091eb2bc625ef58fc9fd704cebf84cd81c16067ad589e4c8f
SHA512

2e8a18d8e6fdda6a8ba046e1366f8332119c4a88ee1692f6348b7360d3f3d395ee23411b5522a6ee0faa9280fcb07d908728bdc5ada9f96942bb5cafe40f17ac
SSDEEP

1536:bwH8glr3QF/GTqg8HLhobQLAfm5b8HLljs2mwEhstzWrYa6:2rlr39Og8HlKQLAfMmLljJmwEixWrL6

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  eab440358f54075b5e222012d0089b28_JaffaCakes118
- Size
  
  93KB
- MD5
  
  eab440358f54075b5e222012d0089b28
- SHA1
  
  b02be079b6c75fa50e33f233a3bb1aa72e8d2a81
- SHA256
  
  4567d1e0ceaba11091eb2bc625ef58fc9fd704cebf84cd81c16067ad589e4c8f
- SHA512
  
  2e8a18d8e6fdda6a8ba046e1366f8332119c4a88ee1692f6348b7360d3f3d395ee23411b5522a6ee0faa9280fcb07d908728bdc5ada9f96942bb5cafe40f17ac
- SSDEEP
  
  1536:bwH8glr3QF/GTqg8HLhobQLAfm5b8HLljs2mwEhstzWrYa6:2rlr39Og8HlKQLAfMmLljJmwEixWrL6
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2