d1f29d6419bf77c04c44fca6ee7a7f1ae8f20fe5a44fe80fa307a9b4a96dddab | Triage

Sharing

General

Target

54a1935614acf01af3012e054a6c3c66_JaffaCakes118
Size

8KB
Sample

241018-bfr8qaxbmh
MD5

54a1935614acf01af3012e054a6c3c66
SHA1

0575d7b11ff41110575dca5de6ef6813397d8a33
SHA256

d1f29d6419bf77c04c44fca6ee7a7f1ae8f20fe5a44fe80fa307a9b4a96dddab
SHA512

0601df1ed1b224e2537d108bd2bc05850ce59b78f987775d2bee68f04466281c52372568d3e7ff4e30c22e291893087f809b2311fcff5c1db02827f41c6d1586
SSDEEP

192:XQ3DEDzshIlTVhtrswXb7KV5dsUYGEGTDBW7le:gTEDzsWZVIV5dJ+ItW7l

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  54a1935614acf01af3012e054a6c3c66_JaffaCakes118
- Size
  
  8KB
- MD5
  
  54a1935614acf01af3012e054a6c3c66
- SHA1
  
  0575d7b11ff41110575dca5de6ef6813397d8a33
- SHA256
  
  d1f29d6419bf77c04c44fca6ee7a7f1ae8f20fe5a44fe80fa307a9b4a96dddab
- SHA512
  
  0601df1ed1b224e2537d108bd2bc05850ce59b78f987775d2bee68f04466281c52372568d3e7ff4e30c22e291893087f809b2311fcff5c1db02827f41c6d1586
- SSDEEP
  
  192:XQ3DEDzshIlTVhtrswXb7KV5dsUYGEGTDBW7le:gTEDzsWZVIV5dJ+ItW7l
Score

8^/10

persistence discovery
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2