416ba004e285fa78e59179938c3264121a7af7369d43f7593be769e172ef393e | Triage

Sharing

General

Target

f0512af001cddec57c780943bc07d8c4_JaffaCakes118
Size

300KB
Sample

240921-v9qfrsvfjp
MD5

f0512af001cddec57c780943bc07d8c4
SHA1

54a32ebb2018c4cc7b2e63623f9d844915ae4686
SHA256

416ba004e285fa78e59179938c3264121a7af7369d43f7593be769e172ef393e
SHA512

cffa5b4eba452607cadaf3469dd8df3af87607c8331974e965f0ed9a0bf5116704740979f11b359e997bfb9fdae6d7fa4256240ca48a7a8656e9574b6b9d32f4
SSDEEP

6144:2jPeicXUPWad3LCwfaDWkkqiIPyeoE7QZCFaVROp/AMsTOW:2asPvd7CwgbiIMAQMon/M6N

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  f0512af001cddec57c780943bc07d8c4_JaffaCakes118
- Size
  
  300KB
- MD5
  
  f0512af001cddec57c780943bc07d8c4
- SHA1
  
  54a32ebb2018c4cc7b2e63623f9d844915ae4686
- SHA256
  
  416ba004e285fa78e59179938c3264121a7af7369d43f7593be769e172ef393e
- SHA512
  
  cffa5b4eba452607cadaf3469dd8df3af87607c8331974e965f0ed9a0bf5116704740979f11b359e997bfb9fdae6d7fa4256240ca48a7a8656e9574b6b9d32f4
- SSDEEP
  
  6144:2jPeicXUPWad3LCwfaDWkkqiIPyeoE7QZCFaVROp/AMsTOW:2asPvd7CwgbiIMAQMon/M6N
Score

7^/10

discovery persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence