3a011bb35cb57aaf4a6127a75eb1d2bb0d8996c9ac8a4a79703d2d88280c85a3 | Triage

Sharing

General

Target

JaffaCakes118_70a43504ae53066710f59d3ef47df025
Size

118KB
Sample

250313-pz4bzswjs8
MD5

70a43504ae53066710f59d3ef47df025
SHA1

4efd848ee421ad7bb84c75edc1d59e599b358a8b
SHA256

3a011bb35cb57aaf4a6127a75eb1d2bb0d8996c9ac8a4a79703d2d88280c85a3
SHA512

d739dde59fbfe8a33c4827e5a1fae5ec04face625bdd187e5afc1ecf60bdb7ccad634d98bfe3c3c13bf7c9b465c91927fcceed2b1e90fedc2b03e1c6387cef38
SSDEEP

1536:kTo1pSyzFIv5x4LnpSkY5E4Eb6QBxBBa0XH1mGcJUsYrDYxMBxn+PXRg:kTo1pSuWvj4zz4xwva88zYPpx+PXK

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_70a43504ae53066710f59d3ef47df025
- Size
  
  118KB
- MD5
  
  70a43504ae53066710f59d3ef47df025
- SHA1
  
  4efd848ee421ad7bb84c75edc1d59e599b358a8b
- SHA256
  
  3a011bb35cb57aaf4a6127a75eb1d2bb0d8996c9ac8a4a79703d2d88280c85a3
- SHA512
  
  d739dde59fbfe8a33c4827e5a1fae5ec04face625bdd187e5afc1ecf60bdb7ccad634d98bfe3c3c13bf7c9b465c91927fcceed2b1e90fedc2b03e1c6387cef38
- SSDEEP
  
  1536:kTo1pSyzFIv5x4LnpSkY5E4Eb6QBxBBa0XH1mGcJUsYrDYxMBxn+PXRg:kTo1pSuWvj4zz4xwva88zYPpx+PXK
Score

7^/10

discovery persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence