c0264e1a85a6c4ae773691d7dded1836f66bfec09eb4fa22d08745133d2876c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ee4132a83a0ac5fc768994f533ad813_JaffaCakes118
Size

82KB
Sample

241009-lp1xbszenf
MD5

2ee4132a83a0ac5fc768994f533ad813
SHA1

d9db718e0fdb5ebe2d33cbbfe6e70d4e168fa494
SHA256

c0264e1a85a6c4ae773691d7dded1836f66bfec09eb4fa22d08745133d2876c9
SHA512

a8e1fee5c4884745828b209a9b1d552827940cca9c1db415b8e37a42f2aea6f2baed4853258ad0878d60d2947f43e45eea516345ec5f2a9855b31471f41a3f25
SSDEEP

1536:mzvCqZLQc2/kitcAZqCC8x8sBcbMTQEGy/B8DPXsykA:mzXLW/5tcAZqV8x8sYyZ8DPcyt

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  2ee4132a83a0ac5fc768994f533ad813_JaffaCakes118
- Size
  
  82KB
- MD5
  
  2ee4132a83a0ac5fc768994f533ad813
- SHA1
  
  d9db718e0fdb5ebe2d33cbbfe6e70d4e168fa494
- SHA256
  
  c0264e1a85a6c4ae773691d7dded1836f66bfec09eb4fa22d08745133d2876c9
- SHA512
  
  a8e1fee5c4884745828b209a9b1d552827940cca9c1db415b8e37a42f2aea6f2baed4853258ad0878d60d2947f43e45eea516345ec5f2a9855b31471f41a3f25
- SSDEEP
  
  1536:mzvCqZLQc2/kitcAZqCC8x8sBcbMTQEGy/B8DPXsykA:mzXLW/5tcAZqV8x8sYyZ8DPcyt
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence