7195fdbd878651782bf7752ec253ffd01c042c9b45dacf820c8855a6e3d56890 | Triage

Sharing

General

Target

ff572ede7562fbbf31ebb54f66beeeb6_JaffaCakes118
Size

32KB
Sample

240929-zyv94a1akr
MD5

ff572ede7562fbbf31ebb54f66beeeb6
SHA1

4f140aaa7ea2315fbe24f0e23b8be5bb8080bb5d
SHA256

7195fdbd878651782bf7752ec253ffd01c042c9b45dacf820c8855a6e3d56890
SHA512

ce84fb47bf5106cdb50ceacf381b7ee051bec25830ad40b3f8b289fd18348e9cbc4137c774696c9e7e7b95d3bcf92532ed0bb69250b42e453ad9814b4c83b590
SSDEEP

384:2WbGo20m8V+RKM797uV0Q8Wmg4jW1HTICiY1Do+pY5z8MKyvzGZ4eF6YyclL6plT:xbcSiK3bb4jWRU+EvPeF6YyUecGmE

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ff572ede7562fbbf31ebb54f66beeeb6_JaffaCakes118
- Size
  
  32KB
- MD5
  
  ff572ede7562fbbf31ebb54f66beeeb6
- SHA1
  
  4f140aaa7ea2315fbe24f0e23b8be5bb8080bb5d
- SHA256
  
  7195fdbd878651782bf7752ec253ffd01c042c9b45dacf820c8855a6e3d56890
- SHA512
  
  ce84fb47bf5106cdb50ceacf381b7ee051bec25830ad40b3f8b289fd18348e9cbc4137c774696c9e7e7b95d3bcf92532ed0bb69250b42e453ad9814b4c83b590
- SSDEEP
  
  384:2WbGo20m8V+RKM797uV0Q8Wmg4jW1HTICiY1Do+pY5z8MKyvzGZ4eF6YyclL6plT:xbcSiK3bb4jWRU+EvPeF6YyUecGmE
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence