939599e255f0c6092afd1b747b0b8d4734ab1218be51708c395151f69da19e39 | Triage

Sharing

General

Target

f6ba36edaf3b699b3656fb94131d06da_JaffaCakes118
Size

141KB
Sample

240925-ydzaksxckc
MD5

f6ba36edaf3b699b3656fb94131d06da
SHA1

9dc88694e0f4be51cc4c6b435349f3939e6b0a47
SHA256

939599e255f0c6092afd1b747b0b8d4734ab1218be51708c395151f69da19e39
SHA512

c70e3cba46c8d75db05db5d4b8461ce7d3d1087d56ac635f856a9b26f85152ba465653944acb7bfe87edb5b978fc45d9c462c2f61461e4efe36e9f607fb0b6b6
SSDEEP

3072:K5yJGaBDcKFP/QCtxydMKNWUWFisaGJC:K59aBwC/QrAfaGw

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  f6ba36edaf3b699b3656fb94131d06da_JaffaCakes118
- Size
  
  141KB
- MD5
  
  f6ba36edaf3b699b3656fb94131d06da
- SHA1
  
  9dc88694e0f4be51cc4c6b435349f3939e6b0a47
- SHA256
  
  939599e255f0c6092afd1b747b0b8d4734ab1218be51708c395151f69da19e39
- SHA512
  
  c70e3cba46c8d75db05db5d4b8461ce7d3d1087d56ac635f856a9b26f85152ba465653944acb7bfe87edb5b978fc45d9c462c2f61461e4efe36e9f607fb0b6b6
- SSDEEP
  
  3072:K5yJGaBDcKFP/QCtxydMKNWUWFisaGJC:K59aBwC/QrAfaGw
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence