aa008a49cbf122c0aa1f7a965b9719929da90715f87434f38aba4c20c53dcc75 | Triage

Sharing

General

Target

2cbd97b186f3c289a2435319c464abea_JaffaCakes118
Size

120KB
Sample

241009-hlwxesvapg
MD5

2cbd97b186f3c289a2435319c464abea
SHA1

9ed8d0cecd0ff7af514c501478346bb4e3ee9138
SHA256

aa008a49cbf122c0aa1f7a965b9719929da90715f87434f38aba4c20c53dcc75
SHA512

ef0ed311666bf0a3ab35b58126428328fc9ca419c2d79a755937fdccc4faaa86227568bcb1385ef15f4c118476c21471cdd9e742d2d7b045c870d65518e9985a
SSDEEP

3072:mTtYzJDNmf85HY4MOv2Hrl95aUXbVqq3jQy:ZBzHAvHtz5qu9

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  2cbd97b186f3c289a2435319c464abea_JaffaCakes118
- Size
  
  120KB
- MD5
  
  2cbd97b186f3c289a2435319c464abea
- SHA1
  
  9ed8d0cecd0ff7af514c501478346bb4e3ee9138
- SHA256
  
  aa008a49cbf122c0aa1f7a965b9719929da90715f87434f38aba4c20c53dcc75
- SHA512
  
  ef0ed311666bf0a3ab35b58126428328fc9ca419c2d79a755937fdccc4faaa86227568bcb1385ef15f4c118476c21471cdd9e742d2d7b045c870d65518e9985a
- SSDEEP
  
  3072:mTtYzJDNmf85HY4MOv2Hrl95aUXbVqq3jQy:ZBzHAvHtz5qu9
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence