809eeb0e1f6c1604fd20e30acbf69b556b3802d7c5b194bdcd7f4bf5c0c9e04f | Triage

Sharing

General

Target

fa2474397919ae01d38f8415ceff20ef_JaffaCakes118
Size

151KB
Sample

240927-lb6wesybnf
MD5

fa2474397919ae01d38f8415ceff20ef
SHA1

3101871f765441903f767a8c7ab5b7b624d21ffa
SHA256

809eeb0e1f6c1604fd20e30acbf69b556b3802d7c5b194bdcd7f4bf5c0c9e04f
SHA512

d29a1620a192b27bd8b5730bba6fccd0d61925d6c52066606ad653695504d7b4bf4d1cede181eb44af200eb2ae907e801a197aab549a9a0f88f0cbe10b33a83d
SSDEEP

3072:wc9vbZWYfocQeXT1AmHnYm55ePz5BXrLTVA8yTJqx9c:J9vdecAcnYmTAXTVfGJqx9

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  fa2474397919ae01d38f8415ceff20ef_JaffaCakes118
- Size
  
  151KB
- MD5
  
  fa2474397919ae01d38f8415ceff20ef
- SHA1
  
  3101871f765441903f767a8c7ab5b7b624d21ffa
- SHA256
  
  809eeb0e1f6c1604fd20e30acbf69b556b3802d7c5b194bdcd7f4bf5c0c9e04f
- SHA512
  
  d29a1620a192b27bd8b5730bba6fccd0d61925d6c52066606ad653695504d7b4bf4d1cede181eb44af200eb2ae907e801a197aab549a9a0f88f0cbe10b33a83d
- SSDEEP
  
  3072:wc9vbZWYfocQeXT1AmHnYm55ePz5BXrLTVA8yTJqx9c:J9vdecAcnYmTAXTVfGJqx9
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2