cdf64c9c6382a9a73b9f6a6a36e2fe9d13dd7251dc0c00edafd47ce97fa984ca | Triage

Sharing

General

Target

30dbc1f186e65e2e986f379957d72684_JaffaCakes118
Size

244KB
Sample

241010-t2kpwavfme
MD5

30dbc1f186e65e2e986f379957d72684
SHA1

38a1a795e428e68c98ea2ad6ec4abcd399ebd5f0
SHA256

cdf64c9c6382a9a73b9f6a6a36e2fe9d13dd7251dc0c00edafd47ce97fa984ca
SHA512

a8f74729feb983c3d9b24850a4d217cdc7ba08432631a86d8dd2abdc67ec31e89b5f8d1eafd9ccb11ddc67de6c47ae90a694d408507ce4071994c4b2b2ebb6f0
SSDEEP

6144:SI4Yg4XBdw1MDDve/fepHjpNqrmNkVsuaRaU6mHG:Sig4Xa/fepHWg0aRz6mHG

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  30dbc1f186e65e2e986f379957d72684_JaffaCakes118
- Size
  
  244KB
- MD5
  
  30dbc1f186e65e2e986f379957d72684
- SHA1
  
  38a1a795e428e68c98ea2ad6ec4abcd399ebd5f0
- SHA256
  
  cdf64c9c6382a9a73b9f6a6a36e2fe9d13dd7251dc0c00edafd47ce97fa984ca
- SHA512
  
  a8f74729feb983c3d9b24850a4d217cdc7ba08432631a86d8dd2abdc67ec31e89b5f8d1eafd9ccb11ddc67de6c47ae90a694d408507ce4071994c4b2b2ebb6f0
- SSDEEP
  
  6144:SI4Yg4XBdw1MDDve/fepHjpNqrmNkVsuaRaU6mHG:Sig4Xa/fepHWg0aRz6mHG
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence