eb603fd6b9b92d08e5223b4a9dc289d85c2cccddada908a13e00b1b59f8597a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f07db3aedc3ed0f740bb7bca60c00d1c_JaffaCakes118
Size

105KB
Sample

240921-ykw4sszgkj
MD5

f07db3aedc3ed0f740bb7bca60c00d1c
SHA1

848ec1713b889617852a225f63aebe4dbff56a35
SHA256

eb603fd6b9b92d08e5223b4a9dc289d85c2cccddada908a13e00b1b59f8597a3
SHA512

f5f70ffcb843ea73180d8a8767c3823e929d45ca3d5bcc55471f2ec5094ea46b1fc48024c269c9c8a87c00bec5c8ba5ef858458a3c50e3537f1cb798979accee
SSDEEP

3072:mD3ibmxlh2qPWbA/Cmka44e4CCnzG4cnFI:qibmxr5/5LJBzs

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  f07db3aedc3ed0f740bb7bca60c00d1c_JaffaCakes118
- Size
  
  105KB
- MD5
  
  f07db3aedc3ed0f740bb7bca60c00d1c
- SHA1
  
  848ec1713b889617852a225f63aebe4dbff56a35
- SHA256
  
  eb603fd6b9b92d08e5223b4a9dc289d85c2cccddada908a13e00b1b59f8597a3
- SHA512
  
  f5f70ffcb843ea73180d8a8767c3823e929d45ca3d5bcc55471f2ec5094ea46b1fc48024c269c9c8a87c00bec5c8ba5ef858458a3c50e3537f1cb798979accee
- SSDEEP
  
  3072:mD3ibmxlh2qPWbA/Cmka44e4CCnzG4cnFI:qibmxr5/5LJBzs
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2