cf5c4385b80ad019741808b30557183199b6242a782b7718efab7dbdd60913fb | Triage

Sharing

General

Target

ef81e90e7ef8c608c7c4ab8f2e4609ee_JaffaCakes118
Size

292KB
Sample

240921-lhrebavhnn
MD5

ef81e90e7ef8c608c7c4ab8f2e4609ee
SHA1

03a738642b5fd130392645b8ff5de5f75ccf2963
SHA256

cf5c4385b80ad019741808b30557183199b6242a782b7718efab7dbdd60913fb
SHA512

232c2ab62f9c1dbbb62fe7896b4913dbb82b9f65837a2955d7a3bed694a5ac8356d09ac12983888f3e7d0236d2894e11ab1dd8b0b1ad49a622a8244f65ca11a7
SSDEEP

6144:A0salexPoOqE4Au4WfHByB3F7nAw1XPpzf8oP9jSb9:A0YgOqzlvBM3/Xxb8oVj

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef81e90e7ef8c608c7c4ab8f2e4609ee_JaffaCakes118
- Size
  
  292KB
- MD5
  
  ef81e90e7ef8c608c7c4ab8f2e4609ee
- SHA1
  
  03a738642b5fd130392645b8ff5de5f75ccf2963
- SHA256
  
  cf5c4385b80ad019741808b30557183199b6242a782b7718efab7dbdd60913fb
- SHA512
  
  232c2ab62f9c1dbbb62fe7896b4913dbb82b9f65837a2955d7a3bed694a5ac8356d09ac12983888f3e7d0236d2894e11ab1dd8b0b1ad49a622a8244f65ca11a7
- SSDEEP
  
  6144:A0salexPoOqE4Au4WfHByB3F7nAw1XPpzf8oP9jSb9:A0YgOqzlvBM3/Xxb8oVj
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2