83c2ac671279f7868f0e848e8c068ed8c6babe5ac95603f1e74286b8dd9a6350 | Triage

Sharing

General

Target

fdd0b50267452dcbed129aefcffb36a8_JaffaCakes118
Size

38KB
Sample

240929-fahjjsshrc
MD5

fdd0b50267452dcbed129aefcffb36a8
SHA1

78a59d6a9edb020173967678c913f7a74e33ae85
SHA256

83c2ac671279f7868f0e848e8c068ed8c6babe5ac95603f1e74286b8dd9a6350
SHA512

d05b45e18a1c62486b84ebb7432602a20bd4a017a4a19ce62455bfb1c7e78254f56d33e5040acc272d75c47cbda59d97d032ef0ba831ad6208129a3cee02ca09
SSDEEP

768:3Gudxg1iMaNjOCHRFjwRk3LmNUgjj/IqjHszIh1KgLhm/:3JoAn70q3aNljwqjHsC1Kn

Score

8^/10

discovery evasion execution persistence

Malware Config

Targets

- Target
  
  fdd0b50267452dcbed129aefcffb36a8_JaffaCakes118
- Size
  
  38KB
- MD5
  
  fdd0b50267452dcbed129aefcffb36a8
- SHA1
  
  78a59d6a9edb020173967678c913f7a74e33ae85
- SHA256
  
  83c2ac671279f7868f0e848e8c068ed8c6babe5ac95603f1e74286b8dd9a6350
- SHA512
  
  d05b45e18a1c62486b84ebb7432602a20bd4a017a4a19ce62455bfb1c7e78254f56d33e5040acc272d75c47cbda59d97d032ef0ba831ad6208129a3cee02ca09
- SSDEEP
  
  768:3Gudxg1iMaNjOCHRFjwRk3LmNUgjj/IqjHszIh1KgLhm/:3JoAn70q3aNljwqjHsC1Kn
Score

8^/10

discovery evasion execution persistence
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistence

behavioral2