1dc84ace0b8c01de6422df830d758fc02a1c36970d4dd23bb6e744ebc8aced05 | Triage

Sharing

General

Target

398b1b1bdcfd378635811a7f9f676875_JaffaCakes118
Size

17KB
Sample

241012-mkzzxawcpc
MD5

398b1b1bdcfd378635811a7f9f676875
SHA1

a7db3079966a281bdb3bd4e7a5e3e12023d32f59
SHA256

1dc84ace0b8c01de6422df830d758fc02a1c36970d4dd23bb6e744ebc8aced05
SHA512

5c0fc8619b124474876b053e13cd0f7f8811881b1bbbed928922a61254b335c49fdcc58815a402420083e4ce9d3e5c0eeb0abe1dc3b139d0126e3b8b302c1677
SSDEEP

384:mjWSFaWrGkbGOu1Yaj1hFzivYwS8laU29v9QopRP:EPJb25hFzipS8dgv9nP

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  398b1b1bdcfd378635811a7f9f676875_JaffaCakes118
- Size
  
  17KB
- MD5
  
  398b1b1bdcfd378635811a7f9f676875
- SHA1
  
  a7db3079966a281bdb3bd4e7a5e3e12023d32f59
- SHA256
  
  1dc84ace0b8c01de6422df830d758fc02a1c36970d4dd23bb6e744ebc8aced05
- SHA512
  
  5c0fc8619b124474876b053e13cd0f7f8811881b1bbbed928922a61254b335c49fdcc58815a402420083e4ce9d3e5c0eeb0abe1dc3b139d0126e3b8b302c1677
- SSDEEP
  
  384:mjWSFaWrGkbGOu1Yaj1hFzivYwS8laU29v9QopRP:EPJb25hFzipS8dgv9nP
Score

8^/10

discovery persistence
- Sets service image path in registry
  persistence
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence