a851648fe46392806210a6f8267bb0e4b6699de38062c0754e83c8fc51268678 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdab1b2161c1b8116510bd33b6154048_JaffaCakes118
Size

21KB
Sample

240929-dgg59axdln
MD5

fdab1b2161c1b8116510bd33b6154048
SHA1

732be7891b9a071ca0e0c62eb273df3368827453
SHA256

a851648fe46392806210a6f8267bb0e4b6699de38062c0754e83c8fc51268678
SHA512

1b59fb4e2c53c895af159f11b4ad74fae5045061e1f1c5031a8c2125e3e275553671f19b15f7ec2e1e86b676957a4d01ca5cac880a4086563402c8854160eb60
SSDEEP

192:vyRQc9XLt63Yl9avM8vnfGMABoM7rAdAO2qnSmqHA4OuGG+MT8ItN:vy99KYl9adnfGMAWMQWOA1h8+

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  fdab1b2161c1b8116510bd33b6154048_JaffaCakes118
- Size
  
  21KB
- MD5
  
  fdab1b2161c1b8116510bd33b6154048
- SHA1
  
  732be7891b9a071ca0e0c62eb273df3368827453
- SHA256
  
  a851648fe46392806210a6f8267bb0e4b6699de38062c0754e83c8fc51268678
- SHA512
  
  1b59fb4e2c53c895af159f11b4ad74fae5045061e1f1c5031a8c2125e3e275553671f19b15f7ec2e1e86b676957a4d01ca5cac880a4086563402c8854160eb60
- SSDEEP
  
  192:vyRQc9XLt63Yl9avM8vnfGMABoM7rAdAO2qnSmqHA4OuGG+MT8ItN:vy99KYl9adnfGMAWMQWOA1h8+
Score

7^/10

discovery persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence