ae4d1e67125d3687b32d0a87795f73a78eb9cc2252fd8f0a969301b7bf45bdd0 | Triage

Sharing

General

Target

047601034ca9ffd0a0f36637dd4736b5_JaffaCakes118
Size

237KB
Sample

241001-fp586asamr
MD5

047601034ca9ffd0a0f36637dd4736b5
SHA1

b9775b7db7466238e1f998fe7b27d53521eca69d
SHA256

ae4d1e67125d3687b32d0a87795f73a78eb9cc2252fd8f0a969301b7bf45bdd0
SHA512

2686a39ed45cb815c22dc1c541a5c098565bec24f45226e09d688f744bc05433d225be2bdf1f7c03ffbe2f65514ba4551f87f38823254e25ad61200e7b423605
SSDEEP

1536:/6NmMBMBKw1ocbCzcT7ZAEPUBe1YWklnJh+HkirKtCugAx5C547zCrG8GpwkF22:/01B7XcbCk+e10JTsKtP5w47zhwkF22

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  047601034ca9ffd0a0f36637dd4736b5_JaffaCakes118
- Size
  
  237KB
- MD5
  
  047601034ca9ffd0a0f36637dd4736b5
- SHA1
  
  b9775b7db7466238e1f998fe7b27d53521eca69d
- SHA256
  
  ae4d1e67125d3687b32d0a87795f73a78eb9cc2252fd8f0a969301b7bf45bdd0
- SHA512
  
  2686a39ed45cb815c22dc1c541a5c098565bec24f45226e09d688f744bc05433d225be2bdf1f7c03ffbe2f65514ba4551f87f38823254e25ad61200e7b423605
- SSDEEP
  
  1536:/6NmMBMBKw1ocbCzcT7ZAEPUBe1YWklnJh+HkirKtCugAx5C547zCrG8GpwkF22:/01B7XcbCk+e10JTsKtP5w47zhwkF22
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence