3b5db50789af16c108bfa8a914796737f84147a6704597ba5054c5bc54cd758b | Triage

Sharing

General

Target

eb7f125dc9310c075c83521bd025168d_JaffaCakes118
Size

74KB
Sample

240919-rfzwkasdkc
MD5

eb7f125dc9310c075c83521bd025168d
SHA1

d6d7e923e157e0057f4f41fb1daf7ac1d1a9061d
SHA256

3b5db50789af16c108bfa8a914796737f84147a6704597ba5054c5bc54cd758b
SHA512

543789a25d5723f996122cfdfdad1531a6fb6daead609e6dc90754b55d8d36f3297ba6f718cccc3cd89b759b366eff30fd8eede6e8d35ee3bbcc6f0519356f55
SSDEEP

1536:XkGjSUnaMDwOhgj8IquZPtuxaKYOHCPvLGTS2u1pZ32uF+WE80:XkGuywO2jpPgmOkrZmuFLd0

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  eb7f125dc9310c075c83521bd025168d_JaffaCakes118
- Size
  
  74KB
- MD5
  
  eb7f125dc9310c075c83521bd025168d
- SHA1
  
  d6d7e923e157e0057f4f41fb1daf7ac1d1a9061d
- SHA256
  
  3b5db50789af16c108bfa8a914796737f84147a6704597ba5054c5bc54cd758b
- SHA512
  
  543789a25d5723f996122cfdfdad1531a6fb6daead609e6dc90754b55d8d36f3297ba6f718cccc3cd89b759b366eff30fd8eede6e8d35ee3bbcc6f0519356f55
- SSDEEP
  
  1536:XkGjSUnaMDwOhgj8IquZPtuxaKYOHCPvLGTS2u1pZ32uF+WE80:XkGuywO2jpPgmOkrZmuFLd0
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence