e2e276b2a0c39d16df252e5e10e0f3cfbfe8761130b1b69f79c313ed15d3cc34 | Triage

Sharing

General

Target

2793202b4f1f2eb67adc9464c632a920_JaffaCakes118
Size

536KB
Sample

241009-akbwvsscmk
MD5

2793202b4f1f2eb67adc9464c632a920
SHA1

39b9af73a0b3cf5d0d73a485dc7d3e73a20c6058
SHA256

e2e276b2a0c39d16df252e5e10e0f3cfbfe8761130b1b69f79c313ed15d3cc34
SHA512

a7fab7e2ab40b46d2f9fd13b7fa43dd5e24f1f8db3452a1866766363a741a60c235cc313d98d6a60c8caebc25e64fd52d71fe3ccc4b3309ebaa946eccb3f89e0
SSDEEP

12288:UnkXLhE7D7+w+T3vq5W1Eyx5RRLot4Dkq2e:UchG7+6W2yx5Pjkle

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  2793202b4f1f2eb67adc9464c632a920_JaffaCakes118
- Size
  
  536KB
- MD5
  
  2793202b4f1f2eb67adc9464c632a920
- SHA1
  
  39b9af73a0b3cf5d0d73a485dc7d3e73a20c6058
- SHA256
  
  e2e276b2a0c39d16df252e5e10e0f3cfbfe8761130b1b69f79c313ed15d3cc34
- SHA512
  
  a7fab7e2ab40b46d2f9fd13b7fa43dd5e24f1f8db3452a1866766363a741a60c235cc313d98d6a60c8caebc25e64fd52d71fe3ccc4b3309ebaa946eccb3f89e0
- SSDEEP
  
  12288:UnkXLhE7D7+w+T3vq5W1Eyx5RRLot4Dkq2e:UchG7+6W2yx5Pjkle
Score

7^/10

discovery persistence
- Drops startup file
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence