df73b74159ae2e68c68fff5bde3855cb4eba0c33fc8a3a1e59daedb5a820b875 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b7f4e25a0cb707b27fa16593b702140_JaffaCakes118
Size

56KB
Sample

241012-w88rdsveng
MD5

3b7f4e25a0cb707b27fa16593b702140
SHA1

68421dadab83d22d850deda562a2c3e06bcb4268
SHA256

df73b74159ae2e68c68fff5bde3855cb4eba0c33fc8a3a1e59daedb5a820b875
SHA512

61ee3919afea21db049386cc0a132a1740457de33d1d47e8b543577d4012ac2242db473d5c9ecae6aee875a0f56861a2903146fa8088917fb38312e4bb66ee19
SSDEEP

768:uEaz5G7MaEtbwQpeyjaSLyfOPT4xcsrRA9Xu/IC4X3i2AH350azknSRXJuRWQlhA:v4GYUWeypTUuuQj635cSRU3iN/ntNL

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  3b7f4e25a0cb707b27fa16593b702140_JaffaCakes118
- Size
  
  56KB
- MD5
  
  3b7f4e25a0cb707b27fa16593b702140
- SHA1
  
  68421dadab83d22d850deda562a2c3e06bcb4268
- SHA256
  
  df73b74159ae2e68c68fff5bde3855cb4eba0c33fc8a3a1e59daedb5a820b875
- SHA512
  
  61ee3919afea21db049386cc0a132a1740457de33d1d47e8b543577d4012ac2242db473d5c9ecae6aee875a0f56861a2903146fa8088917fb38312e4bb66ee19
- SSDEEP
  
  768:uEaz5G7MaEtbwQpeyjaSLyfOPT4xcsrRA9Xu/IC4X3i2AH350azknSRXJuRWQlhA:v4GYUWeypTUuuQj635cSRU3iN/ntNL
Score

7^/10

discovery persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence