ec75806a9a46dcba221a1ec85e61bf1d76c0d28c800b56af7d042edcdc4e6b6c | Triage

Sharing

General

Target

eb9d712db4b0f8a173f6fd5c493c6c5d_JaffaCakes118
Size

312KB
Sample

240919-sp8qhawcnk
MD5

eb9d712db4b0f8a173f6fd5c493c6c5d
SHA1

7683f50f60b9aac555c6e96774813de469e3c947
SHA256

ec75806a9a46dcba221a1ec85e61bf1d76c0d28c800b56af7d042edcdc4e6b6c
SHA512

c57d2a9fb7eabf7ddb9d7fd4fef255d1a64d4c1a7ebfc7eb84c32d3a09a32e2b6af99dac4e3c5554fe6d7a6acc7c815b7d00e215bf849034367fe01a1205c855
SSDEEP

6144:CaUNxXFIZW84aKqRROWHKe4Df+DKt3MghUOr5dBbTI9B14R:Dmx13Rqnj4OKt8ghUyVbE

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  eb9d712db4b0f8a173f6fd5c493c6c5d_JaffaCakes118
- Size
  
  312KB
- MD5
  
  eb9d712db4b0f8a173f6fd5c493c6c5d
- SHA1
  
  7683f50f60b9aac555c6e96774813de469e3c947
- SHA256
  
  ec75806a9a46dcba221a1ec85e61bf1d76c0d28c800b56af7d042edcdc4e6b6c
- SHA512
  
  c57d2a9fb7eabf7ddb9d7fd4fef255d1a64d4c1a7ebfc7eb84c32d3a09a32e2b6af99dac4e3c5554fe6d7a6acc7c815b7d00e215bf849034367fe01a1205c855
- SSDEEP
  
  6144:CaUNxXFIZW84aKqRROWHKe4Df+DKt3MghUOr5dBbTI9B14R:Dmx13Rqnj4OKt8ghUyVbE
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence