8901848415efad80bf430512f7d30ba9328e59e6359d9c94b3608f50d1347b9d | Triage

Sharing

General

Target

eac76fb6eb3d9ac9c72b151dfeaa7bbd_JaffaCakes118
Size

259KB
Sample

240919-hf7fzawbmq
MD5

eac76fb6eb3d9ac9c72b151dfeaa7bbd
SHA1

76ff95766be6959843ae783195b68e44bc48e27a
SHA256

8901848415efad80bf430512f7d30ba9328e59e6359d9c94b3608f50d1347b9d
SHA512

b70bf7e19f59002e3c4d062bda13b900a71f0e13f864bbd3b5ce0b9f832659a591f3b71e1e5954e094cf6b72f98c37773fac1b37df5314b4cf6ce885340c8249
SSDEEP

6144:wgJrZAAkqnANv494D83pJKffKPOw7EMHHEMH:bJrZAAkkANv494D83p5cMEM

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  eac76fb6eb3d9ac9c72b151dfeaa7bbd_JaffaCakes118
- Size
  
  259KB
- MD5
  
  eac76fb6eb3d9ac9c72b151dfeaa7bbd
- SHA1
  
  76ff95766be6959843ae783195b68e44bc48e27a
- SHA256
  
  8901848415efad80bf430512f7d30ba9328e59e6359d9c94b3608f50d1347b9d
- SHA512
  
  b70bf7e19f59002e3c4d062bda13b900a71f0e13f864bbd3b5ce0b9f832659a591f3b71e1e5954e094cf6b72f98c37773fac1b37df5314b4cf6ce885340c8249
- SSDEEP
  
  6144:wgJrZAAkqnANv494D83pJKffKPOw7EMHHEMH:bJrZAAkkANv494D83p5cMEM
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2