a066ea27d3242234716b86eb5585346720c5d03df8e743ab79fe8f776fcf8031 | Triage

Sharing

General

Target

170ce500b40c1f484015635bfc7848a3_JaffaCakes118
Size

1.1MB
Sample

241005-k2qrfs1cqe
MD5

170ce500b40c1f484015635bfc7848a3
SHA1

091e7e65361d28c07fcbc242bad02b9dc0f5fd0c
SHA256

a066ea27d3242234716b86eb5585346720c5d03df8e743ab79fe8f776fcf8031
SHA512

38b3064b00a77744a2b62e79dac8bd941b27dc337214c6eb816365279df1c37bdad7712a1b2b097487fdc40a4cb381b31620da23a78b622d2cb8ad02da896176
SSDEEP

24576:3dsuNOCN8loXWfgLYeuQaTjCdsyYQDsseHtHwKlK7MMMMMMRxbc7X:+uY28SUgLYosM1MMMMMMYr

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  170ce500b40c1f484015635bfc7848a3_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  170ce500b40c1f484015635bfc7848a3
- SHA1
  
  091e7e65361d28c07fcbc242bad02b9dc0f5fd0c
- SHA256
  
  a066ea27d3242234716b86eb5585346720c5d03df8e743ab79fe8f776fcf8031
- SHA512
  
  38b3064b00a77744a2b62e79dac8bd941b27dc337214c6eb816365279df1c37bdad7712a1b2b097487fdc40a4cb381b31620da23a78b622d2cb8ad02da896176
- SSDEEP
  
  24576:3dsuNOCN8loXWfgLYeuQaTjCdsyYQDsseHtHwKlK7MMMMMMRxbc7X:+uY28SUgLYosM1MMMMMMYr
Score

7^/10

discovery persistence
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence