05a7a4c2e20735ca3823ff57b83fb7dca58cd2ee9c8f8a4769bed9385cae6755 | Triage

Sharing

General

Target

3b4465726cc08d05f1e34fab4afa300d_JaffaCakes118
Size

28KB
Sample

241012-v7zawsxarl
MD5

3b4465726cc08d05f1e34fab4afa300d
SHA1

c71e0f60bae2897da07838381c620e2f9bfefc1d
SHA256

05a7a4c2e20735ca3823ff57b83fb7dca58cd2ee9c8f8a4769bed9385cae6755
SHA512

a0e383d95bc81f407976b0fc9948133171bf754d92090241dad51507494cf36f59b460f17d04c3428adf1d14daf27a648caa2cf05ec94922abc6eee1858948e4
SSDEEP

384:YB360vym2ZWCSkxpTT6kOiu98z53JSDKTq7PQ:8Xym2RHT6BiHjgKTKPQ

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  3b4465726cc08d05f1e34fab4afa300d_JaffaCakes118
- Size
  
  28KB
- MD5
  
  3b4465726cc08d05f1e34fab4afa300d
- SHA1
  
  c71e0f60bae2897da07838381c620e2f9bfefc1d
- SHA256
  
  05a7a4c2e20735ca3823ff57b83fb7dca58cd2ee9c8f8a4769bed9385cae6755
- SHA512
  
  a0e383d95bc81f407976b0fc9948133171bf754d92090241dad51507494cf36f59b460f17d04c3428adf1d14daf27a648caa2cf05ec94922abc6eee1858948e4
- SSDEEP
  
  384:YB360vym2ZWCSkxpTT6kOiu98z53JSDKTq7PQ:8Xym2RHT6BiHjgKTKPQ
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence