11b17f1ea44db3c55c23f2d80902ffb7b33bc4ba50b2d49c815470919b439709 | Triage

Sharing

General

Target

f0cbf236b5567e7ec11b28535b40f46a_JaffaCakes118
Size

706KB
Sample

240921-24ycrazakd
MD5

f0cbf236b5567e7ec11b28535b40f46a
SHA1

96e97df88c5530119f115fd86498f0f4b4eafaf2
SHA256

11b17f1ea44db3c55c23f2d80902ffb7b33bc4ba50b2d49c815470919b439709
SHA512

ca57c9641de061ca32eabd9092cece10bf509f7b0a6b0332a235bb579ef7695dbe6c12172224cec3acb230a932d37a288fce988559ab7a48b32c826be5e1b966
SSDEEP

12288:NtKe6Zv23YdqMGHGSX1388BxGVI43GVpinJMcODu5OcQlgv7JZ8fN/Usvq2vZbuv:d6Zv2jbW1SaR7QivMf9E2vZbuv

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  f0cbf236b5567e7ec11b28535b40f46a_JaffaCakes118
- Size
  
  706KB
- MD5
  
  f0cbf236b5567e7ec11b28535b40f46a
- SHA1
  
  96e97df88c5530119f115fd86498f0f4b4eafaf2
- SHA256
  
  11b17f1ea44db3c55c23f2d80902ffb7b33bc4ba50b2d49c815470919b439709
- SHA512
  
  ca57c9641de061ca32eabd9092cece10bf509f7b0a6b0332a235bb579ef7695dbe6c12172224cec3acb230a932d37a288fce988559ab7a48b32c826be5e1b966
- SSDEEP
  
  12288:NtKe6Zv23YdqMGHGSX1388BxGVI43GVpinJMcODu5OcQlgv7JZ8fN/Usvq2vZbuv:d6Zv2jbW1SaR7QivMf9E2vZbuv
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence