ddbcd88e7e4e467a791ecac32533503326635d3f25451790b367e4c44e28cbe8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26431d420a31fdfeae8a40d362ae6542_JaffaCakes118
Size

296KB
Sample

241008-17a6yswgpa
MD5

26431d420a31fdfeae8a40d362ae6542
SHA1

dace98e66c24e423652fdbba727b0e4bf8dc4754
SHA256

ddbcd88e7e4e467a791ecac32533503326635d3f25451790b367e4c44e28cbe8
SHA512

00740e9e115a00a30c7975326f7d62666a1399388f255b056bfd2432c4d84303b872fffa89aae554fbc3381dbc183e5169bf90bb8b6ae053a59714d83160a462
SSDEEP

6144:9hWlu7swQ+yXZL/MQiXjhevC7zpfO9CXogdqy7iNJQpnDBfO:N7swQhBkQiXjh8C3pfrQykInlO

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  26431d420a31fdfeae8a40d362ae6542_JaffaCakes118
- Size
  
  296KB
- MD5
  
  26431d420a31fdfeae8a40d362ae6542
- SHA1
  
  dace98e66c24e423652fdbba727b0e4bf8dc4754
- SHA256
  
  ddbcd88e7e4e467a791ecac32533503326635d3f25451790b367e4c44e28cbe8
- SHA512
  
  00740e9e115a00a30c7975326f7d62666a1399388f255b056bfd2432c4d84303b872fffa89aae554fbc3381dbc183e5169bf90bb8b6ae053a59714d83160a462
- SSDEEP
  
  6144:9hWlu7swQ+yXZL/MQiXjhevC7zpfO9CXogdqy7iNJQpnDBfO:N7swQhBkQiXjh8C3pfrQykInlO
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2