c89095edad758520255663cb57081f0cc7a8e08e151b0b49a3904366fae23f33 | Triage

Sharing

General

Target

07d9cf52db13d39bef9e6cf272dda67b_JaffaCakes118
Size

30KB
Sample

241001-3e4c5swcjk
MD5

07d9cf52db13d39bef9e6cf272dda67b
SHA1

06978be90cf8ec54bbc46b0bfbb104fc52ab8fc0
SHA256

c89095edad758520255663cb57081f0cc7a8e08e151b0b49a3904366fae23f33
SHA512

0fe6bda6b3c0d8793deee35c0134dc128f61826ece6a69a6b1a96a5b818d50ce41b6d9fc29be36fb8c77f25845dea33c9fae9d620c263233503a08912291e6b5
SSDEEP

768:vZUkzLe0slZphX+mpW6VXGex5X0x42n//h7ELWHbCEX:vZUkzLeJfmgzVXGezCnR7Ea7CEX

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  07d9cf52db13d39bef9e6cf272dda67b_JaffaCakes118
- Size
  
  30KB
- MD5
  
  07d9cf52db13d39bef9e6cf272dda67b
- SHA1
  
  06978be90cf8ec54bbc46b0bfbb104fc52ab8fc0
- SHA256
  
  c89095edad758520255663cb57081f0cc7a8e08e151b0b49a3904366fae23f33
- SHA512
  
  0fe6bda6b3c0d8793deee35c0134dc128f61826ece6a69a6b1a96a5b818d50ce41b6d9fc29be36fb8c77f25845dea33c9fae9d620c263233503a08912291e6b5
- SSDEEP
  
  768:vZUkzLe0slZphX+mpW6VXGex5X0x42n//h7ELWHbCEX:vZUkzLeJfmgzVXGezCnR7Ea7CEX
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence