69b1f9f4de21346dd2ac2fb954026697ae8b2c8bfd535500127079b9ce803c32 | Triage

Sharing

General

Target

9eecb673f72c7c0d29e6f1b18c0c9f2b_JaffaCakes118
Size

87KB
Sample

241126-bby6gavrbw
MD5

9eecb673f72c7c0d29e6f1b18c0c9f2b
SHA1

796bf6cc1a15ee0486097cc9540390df8b5391ab
SHA256

69b1f9f4de21346dd2ac2fb954026697ae8b2c8bfd535500127079b9ce803c32
SHA512

60d0efbe89d07c27d9c75417e03a275a26a4c6938f7250178a8e984b1aedbaa308407097962ce69210161f9f9198c30f7ffeb26ade97c3007ef550e6a0612459
SSDEEP

1536:wQ4i+YbahKwyxkEvmEl1U3vNXIsfMIj6TDqEEnMUsRE+dWY9:VteKl9pkxIsrjol2KWY

Score

7^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  9eecb673f72c7c0d29e6f1b18c0c9f2b_JaffaCakes118
- Size
  
  87KB
- MD5
  
  9eecb673f72c7c0d29e6f1b18c0c9f2b
- SHA1
  
  796bf6cc1a15ee0486097cc9540390df8b5391ab
- SHA256
  
  69b1f9f4de21346dd2ac2fb954026697ae8b2c8bfd535500127079b9ce803c32
- SHA512
  
  60d0efbe89d07c27d9c75417e03a275a26a4c6938f7250178a8e984b1aedbaa308407097962ce69210161f9f9198c30f7ffeb26ade97c3007ef550e6a0612459
- SSDEEP
  
  1536:wQ4i+YbahKwyxkEvmEl1U3vNXIsfMIj6TDqEEnMUsRE+dWY9:VteKl9pkxIsrjol2KWY
Score

7^/10

defense_evasion discovery persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2