11e1d2b723470e4ec9014e98e957824f55fb46bc530a42504373cda08606b637 | Triage

Sharing

General

Target

3001b4e0037d94621068233882d7e785_JaffaCakes118
Size

57KB
Sample

241010-qat8fswhmg
MD5

3001b4e0037d94621068233882d7e785
SHA1

d985e7a2b5c3cd31061a20f80a007f1762c921e2
SHA256

11e1d2b723470e4ec9014e98e957824f55fb46bc530a42504373cda08606b637
SHA512

d97111ec83760270b74d96d0bf13710aec9454901bd1017f6c77d43ddc3dd1809117709c1a540626046e9a67bd1e6156e11cdebb2bc4d9389b2bb29338ac10f5
SSDEEP

768:uEaz5G7MaEtbwQpeyjaSLyfOPT4xcsrRA9Xu/IC4X3i2AH350azknSRXJuRWQlhA:v4GYUWeypTUuuQj635cSRU3iN/ntN9

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  3001b4e0037d94621068233882d7e785_JaffaCakes118
- Size
  
  57KB
- MD5
  
  3001b4e0037d94621068233882d7e785
- SHA1
  
  d985e7a2b5c3cd31061a20f80a007f1762c921e2
- SHA256
  
  11e1d2b723470e4ec9014e98e957824f55fb46bc530a42504373cda08606b637
- SHA512
  
  d97111ec83760270b74d96d0bf13710aec9454901bd1017f6c77d43ddc3dd1809117709c1a540626046e9a67bd1e6156e11cdebb2bc4d9389b2bb29338ac10f5
- SSDEEP
  
  768:uEaz5G7MaEtbwQpeyjaSLyfOPT4xcsrRA9Xu/IC4X3i2AH350azknSRXJuRWQlhA:v4GYUWeypTUuuQj635cSRU3iN/ntN9
Score

7^/10

discovery persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence