39284c0816bed1b198b71d0bd02c2f0d62c56b4bb5e7f990a4f64e28460ec127 | Triage

Sharing

General

Target

036526da192b95a09d5895ac23d9d31f_JaffaCakes118
Size

24KB
Sample

240930-1sqm4a1bqf
MD5

036526da192b95a09d5895ac23d9d31f
SHA1

cc2081e10a6f07d2036919e9b3b77fe77308feee
SHA256

39284c0816bed1b198b71d0bd02c2f0d62c56b4bb5e7f990a4f64e28460ec127
SHA512

93a6a3844f8187a209485d2b36ec19a4eeacbf3b35480121515ce02a84b7a0fed2605e4d5a47196fba1042ab1852252935dfb5116f553b4dd7964ea4dd809c6c
SSDEEP

384:E3eVES+/xwGkRKJ6lM61qmTTMVF9/q5R0:bGS+ZfbJ6O8qYoAO

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  036526da192b95a09d5895ac23d9d31f_JaffaCakes118
- Size
  
  24KB
- MD5
  
  036526da192b95a09d5895ac23d9d31f
- SHA1
  
  cc2081e10a6f07d2036919e9b3b77fe77308feee
- SHA256
  
  39284c0816bed1b198b71d0bd02c2f0d62c56b4bb5e7f990a4f64e28460ec127
- SHA512
  
  93a6a3844f8187a209485d2b36ec19a4eeacbf3b35480121515ce02a84b7a0fed2605e4d5a47196fba1042ab1852252935dfb5116f553b4dd7964ea4dd809c6c
- SSDEEP
  
  384:E3eVES+/xwGkRKJ6lM61qmTTMVF9/q5R0:bGS+ZfbJ6O8qYoAO
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence