698be2b05cdc280c40dbc4511abbdb3ae7b524fe09193f4cbb9a10854b605b59 | Triage

Sharing

General

Target

JaffaCakes118_e28883b2de6a815081a6657a1c3aba43
Size

388KB
Sample

250120-k31m2sskdq
MD5

e28883b2de6a815081a6657a1c3aba43
SHA1

60562fe77fd0a03f3743eaea5e252d770c825012
SHA256

698be2b05cdc280c40dbc4511abbdb3ae7b524fe09193f4cbb9a10854b605b59
SHA512

c54c073b9461cc6159d0d28ed019fa7893201d5bb894ec6f1678c139d337616880ca51328a62b9a9bd56627b09a7cfc66881251bd74cc1a10d6e451e69855aa0
SSDEEP

6144:hfGHeq2kJft+YD/+9QaU9PpQrC0DqAnu7rhHf4UwlRS6Cj5KAvvwB/Rgl8zMrML:meq2AlPW9IRpQr7u79HwUIRS6EvYBei

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_e28883b2de6a815081a6657a1c3aba43
- Size
  
  388KB
- MD5
  
  e28883b2de6a815081a6657a1c3aba43
- SHA1
  
  60562fe77fd0a03f3743eaea5e252d770c825012
- SHA256
  
  698be2b05cdc280c40dbc4511abbdb3ae7b524fe09193f4cbb9a10854b605b59
- SHA512
  
  c54c073b9461cc6159d0d28ed019fa7893201d5bb894ec6f1678c139d337616880ca51328a62b9a9bd56627b09a7cfc66881251bd74cc1a10d6e451e69855aa0
- SSDEEP
  
  6144:hfGHeq2kJft+YD/+9QaU9PpQrC0DqAnu7rhHf4UwlRS6Cj5KAvvwB/Rgl8zMrML:meq2AlPW9IRpQr7u79HwUIRS6EvYBei
Score

7^/10

discovery persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence