b42aa3dab8651f367a299dcb3255a64443fc852727a070d4ca65a681cd1776c3 | Triage

Sharing

General

Target

065296099899a74f3ce89965c0207a98_JaffaCakes118
Size

236KB
Sample

241001-spv5eazfrg
MD5

065296099899a74f3ce89965c0207a98
SHA1

fc4c9a68018297284f022d00b7076dbac92d356a
SHA256

b42aa3dab8651f367a299dcb3255a64443fc852727a070d4ca65a681cd1776c3
SHA512

829e5be96c434faa91889b08f94196302f1cc2605a2e6c9ab808e85cca1aa6c2bb81b6ab555608ce1462afbac1b016e6dc623352653acea4a2aa72c5b90a14e1
SSDEEP

3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIK:+Qj9U3jwO3rt5V

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  065296099899a74f3ce89965c0207a98_JaffaCakes118
- Size
  
  236KB
- MD5
  
  065296099899a74f3ce89965c0207a98
- SHA1
  
  fc4c9a68018297284f022d00b7076dbac92d356a
- SHA256
  
  b42aa3dab8651f367a299dcb3255a64443fc852727a070d4ca65a681cd1776c3
- SHA512
  
  829e5be96c434faa91889b08f94196302f1cc2605a2e6c9ab808e85cca1aa6c2bb81b6ab555608ce1462afbac1b016e6dc623352653acea4a2aa72c5b90a14e1
- SSDEEP
  
  3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIK:+Qj9U3jwO3rt5V
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence