2815532a743f56509cb0c6890659b0415984922a4f8c7fe27d98ea1f8ee14bae | Triage

Sharing

General

Target

0a169ecff43b3510f3f074cfafdd604b_JaffaCakes118
Size

606KB
Sample

241002-lxxjwazdrj
MD5

0a169ecff43b3510f3f074cfafdd604b
SHA1

8ac635686bc8af76eb73d6d360ab12c992706467
SHA256

2815532a743f56509cb0c6890659b0415984922a4f8c7fe27d98ea1f8ee14bae
SHA512

8b0af2dae3d9f6b6b18c9fefa02118102ffc4d994dbb0676112407a413c0aff5a6d9e670befc6ad3fa5fd3985570e54d089c85c6db623e62d6db8b0b2ca3c702
SSDEEP

12288:NtKe6Zv23YdL/W5L/SZdSCvTF+bDTqXTa7vuJhUOLt+FtvCQmKdFtC:d6Zv24/WNSZ8CLGETfJmOLEzNHtC

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  0a169ecff43b3510f3f074cfafdd604b_JaffaCakes118
- Size
  
  606KB
- MD5
  
  0a169ecff43b3510f3f074cfafdd604b
- SHA1
  
  8ac635686bc8af76eb73d6d360ab12c992706467
- SHA256
  
  2815532a743f56509cb0c6890659b0415984922a4f8c7fe27d98ea1f8ee14bae
- SHA512
  
  8b0af2dae3d9f6b6b18c9fefa02118102ffc4d994dbb0676112407a413c0aff5a6d9e670befc6ad3fa5fd3985570e54d089c85c6db623e62d6db8b0b2ca3c702
- SSDEEP
  
  12288:NtKe6Zv23YdL/W5L/SZdSCvTF+bDTqXTa7vuJhUOLt+FtvCQmKdFtC:d6Zv24/WNSZ8CLGETfJmOLEzNHtC
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence