1e7d2c626b741a4a5460e4690cd3f670600808f73de56bc3887caeb7020491c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f559a2b2713f7d6e5ed0ac4ea9f0e8c9_JaffaCakes118
Size

59KB
Sample

240925-gr9j2asbpe
MD5

f559a2b2713f7d6e5ed0ac4ea9f0e8c9
SHA1

723a97465fad697c73c13246ae33c950595ce1d0
SHA256

1e7d2c626b741a4a5460e4690cd3f670600808f73de56bc3887caeb7020491c4
SHA512

852b0ceeb4424e7973a9d476bf54f3eef35d73f8d00a0d63c07303841c3d60bcc93f1333e23d2f2ab5f65ac8a0029d53cf6983c61113aba4b2cca58861ed5971
SSDEEP

1536:6oKH+FbjDXRjoeo+MOxj2oJ9KrLNXDw568+:6LgbjDXBoeIyj2oPAJgS

Score

7^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  f559a2b2713f7d6e5ed0ac4ea9f0e8c9_JaffaCakes118
- Size
  
  59KB
- MD5
  
  f559a2b2713f7d6e5ed0ac4ea9f0e8c9
- SHA1
  
  723a97465fad697c73c13246ae33c950595ce1d0
- SHA256
  
  1e7d2c626b741a4a5460e4690cd3f670600808f73de56bc3887caeb7020491c4
- SHA512
  
  852b0ceeb4424e7973a9d476bf54f3eef35d73f8d00a0d63c07303841c3d60bcc93f1333e23d2f2ab5f65ac8a0029d53cf6983c61113aba4b2cca58861ed5971
- SSDEEP
  
  1536:6oKH+FbjDXRjoeo+MOxj2oJ9KrLNXDw568+:6LgbjDXBoeIyj2oPAJgS
Score

7^/10

defense_evasion discovery persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2