7014bcd6048766c00d15004035797b969eaab99dacbc93649a3ee504eddbb7b2 | Triage

Sharing

General

Target

ff50f8052865595a2512c3f39f26195b_JaffaCakes118
Size

44KB
Sample

240929-znnghatfpa
MD5

ff50f8052865595a2512c3f39f26195b
SHA1

15f0e832973aee6b87f1390c8a0e65658ebffd3a
SHA256

7014bcd6048766c00d15004035797b969eaab99dacbc93649a3ee504eddbb7b2
SHA512

c23df599adc3b8b3fd8562c2837145ad3435ddf91294f3e7cc49b76d8390acad1e977fc9737de441c2c1e841a5de8c7fe5aa9845eace766d7d9c87e37dbf65bf
SSDEEP

384:S7z6uCTB08nKB1syFYFkLJKrCvS/qsLf7U953Q4XH40LPDosK3IR:SX6VKBCxOYO2eQi407DosK3IR

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  ff50f8052865595a2512c3f39f26195b_JaffaCakes118
- Size
  
  44KB
- MD5
  
  ff50f8052865595a2512c3f39f26195b
- SHA1
  
  15f0e832973aee6b87f1390c8a0e65658ebffd3a
- SHA256
  
  7014bcd6048766c00d15004035797b969eaab99dacbc93649a3ee504eddbb7b2
- SHA512
  
  c23df599adc3b8b3fd8562c2837145ad3435ddf91294f3e7cc49b76d8390acad1e977fc9737de441c2c1e841a5de8c7fe5aa9845eace766d7d9c87e37dbf65bf
- SSDEEP
  
  384:S7z6uCTB08nKB1syFYFkLJKrCvS/qsLf7U953Q4XH40LPDosK3IR:SX6VKBCxOYO2eQi407DosK3IR
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence