4e8b6419951a3196a71bfc9e9c8ae0acc3249935e9e1b26c9715369f071ecf91 | Triage

Sharing

General

Target

0742c03eb9e0bee34c2f9aad216f0a99_JaffaCakes118
Size

312KB
Sample

241001-y1d8xsscna
MD5

0742c03eb9e0bee34c2f9aad216f0a99
SHA1

68cfca04543e110bfc52a2c0359e06eee944c952
SHA256

4e8b6419951a3196a71bfc9e9c8ae0acc3249935e9e1b26c9715369f071ecf91
SHA512

8bb9a6a1a0d6867abdf635b359a117075bb5e93d4e632da59b7597c1b4e917355ddf99f1a9483136bd27b3989e3d9fb06de03c0682f8128f4e2c7edb467add1f
SSDEEP

6144:m8HaHz7S0vsD67q5pHD0MRjSSELgHaBponiZoPuCPa:pYnkD67q5Gg2omEgC

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0742c03eb9e0bee34c2f9aad216f0a99_JaffaCakes118
- Size
  
  312KB
- MD5
  
  0742c03eb9e0bee34c2f9aad216f0a99
- SHA1
  
  68cfca04543e110bfc52a2c0359e06eee944c952
- SHA256
  
  4e8b6419951a3196a71bfc9e9c8ae0acc3249935e9e1b26c9715369f071ecf91
- SHA512
  
  8bb9a6a1a0d6867abdf635b359a117075bb5e93d4e632da59b7597c1b4e917355ddf99f1a9483136bd27b3989e3d9fb06de03c0682f8128f4e2c7edb467add1f
- SSDEEP
  
  6144:m8HaHz7S0vsD67q5pHD0MRjSSELgHaBponiZoPuCPa:pYnkD67q5Gg2omEgC
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence