a43f0b166db8fa86f32cc41e580827abe65bb6cf011b5bc9e1db873973a31752 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

017e67e312a4580e95c8ebbb52e1a0b8_JaffaCakes118
Size

208KB
Sample

240930-qdnvvaxank
MD5

017e67e312a4580e95c8ebbb52e1a0b8
SHA1

7b5176968fd546cb55cc4cf23a00e959d2d8f17a
SHA256

a43f0b166db8fa86f32cc41e580827abe65bb6cf011b5bc9e1db873973a31752
SHA512

41bd86b957afa5f92b650aeea912a422dffcbb28435ffb18a9ecc2a13cb1f4db603d19c1afc5cff69b02852a9486c338da7d5607b7fc484e93a7af5f00a4813a
SSDEEP

3072:g4KZrtHTvptR7FCInqsMzqkqsyjPM8LVqjZyubGthYaioOubVnkQ0RQWs8R:yZTJF1nqsMzqts+Mh9

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  017e67e312a4580e95c8ebbb52e1a0b8_JaffaCakes118
- Size
  
  208KB
- MD5
  
  017e67e312a4580e95c8ebbb52e1a0b8
- SHA1
  
  7b5176968fd546cb55cc4cf23a00e959d2d8f17a
- SHA256
  
  a43f0b166db8fa86f32cc41e580827abe65bb6cf011b5bc9e1db873973a31752
- SHA512
  
  41bd86b957afa5f92b650aeea912a422dffcbb28435ffb18a9ecc2a13cb1f4db603d19c1afc5cff69b02852a9486c338da7d5607b7fc484e93a7af5f00a4813a
- SSDEEP
  
  3072:g4KZrtHTvptR7FCInqsMzqkqsyjPM8LVqjZyubGthYaioOubVnkQ0RQWs8R:yZTJF1nqsMzqts+Mh9
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence