f48c6818e42a9e0360e97775544587a81266cd902254b29157e1ac21ea6438e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

371dc93f2ec7454e56f9512d71c82117_JaffaCakes118
Size

43KB
Sample

241011-2c5yhsxdpf
MD5

371dc93f2ec7454e56f9512d71c82117
SHA1

6a05708375cfd3b625764845c1cb8fb531f11555
SHA256

f48c6818e42a9e0360e97775544587a81266cd902254b29157e1ac21ea6438e3
SHA512

ac9947a0782fda2dae52ecf0a11db1e99d9852d4bcbf3e51c9fea5c630abd202a7cf684d20ef33cfed123875ca51657d0453ddb738d6804d3cb97f826f11cd53
SSDEEP

768:jxcuKrE+gXeM0r8X0pMcekz2A8wn/S3iqgrZ2jbAfouJNIrrEF0U9aNG8:jxcho5aY0pMceX5w/5nZbHBF79m

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  371dc93f2ec7454e56f9512d71c82117_JaffaCakes118
- Size
  
  43KB
- MD5
  
  371dc93f2ec7454e56f9512d71c82117
- SHA1
  
  6a05708375cfd3b625764845c1cb8fb531f11555
- SHA256
  
  f48c6818e42a9e0360e97775544587a81266cd902254b29157e1ac21ea6438e3
- SHA512
  
  ac9947a0782fda2dae52ecf0a11db1e99d9852d4bcbf3e51c9fea5c630abd202a7cf684d20ef33cfed123875ca51657d0453ddb738d6804d3cb97f826f11cd53
- SSDEEP
  
  768:jxcuKrE+gXeM0r8X0pMcekz2A8wn/S3iqgrZ2jbAfouJNIrrEF0U9aNG8:jxcho5aY0pMceX5w/5nZbHBF79m
Score

8^/10

discovery persistence
- Blocklisted process makes network request
- Drops file in Drivers directory
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence