b4a9ee50d4a4950c03c5270bf2d23838987ce89931c28435502ed1fb12779a69 | Triage

Sharing

General

Target

f6025fc4111ae6dcd7ba3aa260d05af9_JaffaCakes118
Size

52KB
Sample

240925-pk8m6avenl
MD5

f6025fc4111ae6dcd7ba3aa260d05af9
SHA1

4a0c41328da7eb1bd7e9b6eb882080b67f953342
SHA256

b4a9ee50d4a4950c03c5270bf2d23838987ce89931c28435502ed1fb12779a69
SHA512

332378bdcc4060ccbd9825294f19413783f6988d78712eee2a2b773a7607d244e15fe9df8659544cd145c45e9079c40604bcf41c9748a70fc619254ecac87386
SSDEEP

384:Oew8oS+dY3Wb6dR9TFJG6nrbRc9JrL+S6PGItg:gxS+GGb6FFJd6aPGI+

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  f6025fc4111ae6dcd7ba3aa260d05af9_JaffaCakes118
- Size
  
  52KB
- MD5
  
  f6025fc4111ae6dcd7ba3aa260d05af9
- SHA1
  
  4a0c41328da7eb1bd7e9b6eb882080b67f953342
- SHA256
  
  b4a9ee50d4a4950c03c5270bf2d23838987ce89931c28435502ed1fb12779a69
- SHA512
  
  332378bdcc4060ccbd9825294f19413783f6988d78712eee2a2b773a7607d244e15fe9df8659544cd145c45e9079c40604bcf41c9748a70fc619254ecac87386
- SSDEEP
  
  384:Oew8oS+dY3Wb6dR9TFJG6nrbRc9JrL+S6PGItg:gxS+GGb6FFJd6aPGI+
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence