1252ae8247e15d4aa197bf461fc87788d9cab2a095bb888795ce28a9c8dc413d | Triage

Sharing

General

Target

14c717066c5655b3beb55dcfa3faa1d2_JaffaCakes118
Size

986KB
Sample

241004-y1bsssyeja
MD5

14c717066c5655b3beb55dcfa3faa1d2
SHA1

a9781f5bf348974c97b3eaef8f5936b31e331e73
SHA256

1252ae8247e15d4aa197bf461fc87788d9cab2a095bb888795ce28a9c8dc413d
SHA512

58b12a08e0375b1c8d27e760f01c9e87f02a94ae69e1f5d0d74fab79010245a987e2b18bff993d7a78c2a9f7a1d933292ff69392be9eabf81d3de18107762e54
SSDEEP

24576:o0tjgWoWiCDgdVKGPzDLQNTuBcxVgUz0:7npiogdgMIacpz

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  14c717066c5655b3beb55dcfa3faa1d2_JaffaCakes118
- Size
  
  986KB
- MD5
  
  14c717066c5655b3beb55dcfa3faa1d2
- SHA1
  
  a9781f5bf348974c97b3eaef8f5936b31e331e73
- SHA256
  
  1252ae8247e15d4aa197bf461fc87788d9cab2a095bb888795ce28a9c8dc413d
- SHA512
  
  58b12a08e0375b1c8d27e760f01c9e87f02a94ae69e1f5d0d74fab79010245a987e2b18bff993d7a78c2a9f7a1d933292ff69392be9eabf81d3de18107762e54
- SSDEEP
  
  24576:o0tjgWoWiCDgdVKGPzDLQNTuBcxVgUz0:7npiogdgMIacpz
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2