87e0a338b952aefeb411e37d5779aab9f79fc501b4aff949b083085ff7d27506 | Triage

Sharing

General

Target

84df1ea9cb1fd2c1ef3e7f2e11f7db82_JaffaCakes118
Size

216KB
Sample

241102-g873jaykfz
MD5

84df1ea9cb1fd2c1ef3e7f2e11f7db82
SHA1

8f00465bf91eafd5d111f3121a57ed1b95f5d94f
SHA256

87e0a338b952aefeb411e37d5779aab9f79fc501b4aff949b083085ff7d27506
SHA512

9c86628e66f1e9a8cada54a2c9fb4f99dfd77037151314ea2e2e16d16e19c56bdd37920ba730a23d77ff33c31393e4a6902a9c667ca69e28142b62268e16bb38
SSDEEP

6144:tGHAQw6SGfO4pYtbDn1l9VyCkHC1DrrIZ:tgeRuO4p+bv3yCS0n

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  84df1ea9cb1fd2c1ef3e7f2e11f7db82_JaffaCakes118
- Size
  
  216KB
- MD5
  
  84df1ea9cb1fd2c1ef3e7f2e11f7db82
- SHA1
  
  8f00465bf91eafd5d111f3121a57ed1b95f5d94f
- SHA256
  
  87e0a338b952aefeb411e37d5779aab9f79fc501b4aff949b083085ff7d27506
- SHA512
  
  9c86628e66f1e9a8cada54a2c9fb4f99dfd77037151314ea2e2e16d16e19c56bdd37920ba730a23d77ff33c31393e4a6902a9c667ca69e28142b62268e16bb38
- SSDEEP
  
  6144:tGHAQw6SGfO4pYtbDn1l9VyCkHC1DrrIZ:tgeRuO4p+bv3yCS0n
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2