42bcb5abc283781185165a84d83139f7314cc72239fc8e905b434d93efa73ae7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb245ef932cae42f61a746a5bf80c2d8_JaffaCakes118
Size

10KB
Sample

240928-ab39rayfld
MD5

fb245ef932cae42f61a746a5bf80c2d8
SHA1

8f83cf25a75a7c4665a7313ab933ba32e758dbf7
SHA256

42bcb5abc283781185165a84d83139f7314cc72239fc8e905b434d93efa73ae7
SHA512

43712f935d81056afc84c8dd7667aca6198782e75e6ad189553571cfcfb38607e75d646de1104f69b1c2b416205a4ce9d17fea5df7ee15e1286def6ca0e8a66f
SSDEEP

192:KLLjVii3xnxbroXnL9fezBjIQaVYALnPoIpaMbjGH2CJbA/BjJap:KLLj8IxbrYJfetMQZALWMbjGH2lBtY

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  fb245ef932cae42f61a746a5bf80c2d8_JaffaCakes118
- Size
  
  10KB
- MD5
  
  fb245ef932cae42f61a746a5bf80c2d8
- SHA1
  
  8f83cf25a75a7c4665a7313ab933ba32e758dbf7
- SHA256
  
  42bcb5abc283781185165a84d83139f7314cc72239fc8e905b434d93efa73ae7
- SHA512
  
  43712f935d81056afc84c8dd7667aca6198782e75e6ad189553571cfcfb38607e75d646de1104f69b1c2b416205a4ce9d17fea5df7ee15e1286def6ca0e8a66f
- SSDEEP
  
  192:KLLjVii3xnxbroXnL9fezBjIQaVYALnPoIpaMbjGH2CJbA/BjJap:KLLj8IxbrYJfetMQZALWMbjGH2lBtY
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence