9107014d1d456b639ed795e8a6284ff4f312484be4903f0091bd21596910c90b | Triage

Sharing

General

Target

3a00f6ce6928fdb29167938f773cb1c0_JaffaCakes118
Size

40KB
Sample

241012-pl3hjazfrh
MD5

3a00f6ce6928fdb29167938f773cb1c0
SHA1

82ce42e2811aa4638ba01264c253276b2128c7e6
SHA256

9107014d1d456b639ed795e8a6284ff4f312484be4903f0091bd21596910c90b
SHA512

b10dd64214e6fa0f84911a36f51366f7c6ab1e45c50f839c11cf70eb4d17a69e159048bccda41c017568886643f71085d8c12b4a4c426778b251958cec84a660
SSDEEP

768:LJgjz3Ge4FlgZyiaCSedw1fpSmBEqxr6J4wtj:LJgjz3J4FlgASdK/ZBStj

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  3a00f6ce6928fdb29167938f773cb1c0_JaffaCakes118
- Size
  
  40KB
- MD5
  
  3a00f6ce6928fdb29167938f773cb1c0
- SHA1
  
  82ce42e2811aa4638ba01264c253276b2128c7e6
- SHA256
  
  9107014d1d456b639ed795e8a6284ff4f312484be4903f0091bd21596910c90b
- SHA512
  
  b10dd64214e6fa0f84911a36f51366f7c6ab1e45c50f839c11cf70eb4d17a69e159048bccda41c017568886643f71085d8c12b4a4c426778b251958cec84a660
- SSDEEP
  
  768:LJgjz3Ge4FlgZyiaCSedw1fpSmBEqxr6J4wtj:LJgjz3J4FlgASdK/ZBStj
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence