8bdb2fd35699d78bca1b443092bf9a3c2f3c0d8a1a6280e4b59521502c72446f | Triage

Sharing

General

Target

JaffaCakes118_8a9a37a6294ce8b9ce7b2e968223cb03
Size

33KB
Sample

250328-mykgdavvf1
MD5

8a9a37a6294ce8b9ce7b2e968223cb03
SHA1

8da1ee847c86c19bbfe8aa672f0c5dc194670757
SHA256

8bdb2fd35699d78bca1b443092bf9a3c2f3c0d8a1a6280e4b59521502c72446f
SHA512

6169c5f02b70bc35306bbb3dcd1151db2ea58cf509f0ec0fc318b01c5a277e21088d3d4759ffe8aaa82b15f38c7d494480a68866064b1470df49eee88a74574e
SSDEEP

384:uuH+6ahr6YDUCCR0FaJgffmFdJwYDcRw45H0rikLKY:uk+5nD7BaJgWFda4cJq

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_8a9a37a6294ce8b9ce7b2e968223cb03
- Size
  
  33KB
- MD5
  
  8a9a37a6294ce8b9ce7b2e968223cb03
- SHA1
  
  8da1ee847c86c19bbfe8aa672f0c5dc194670757
- SHA256
  
  8bdb2fd35699d78bca1b443092bf9a3c2f3c0d8a1a6280e4b59521502c72446f
- SHA512
  
  6169c5f02b70bc35306bbb3dcd1151db2ea58cf509f0ec0fc318b01c5a277e21088d3d4759ffe8aaa82b15f38c7d494480a68866064b1470df49eee88a74574e
- SSDEEP
  
  384:uuH+6ahr6YDUCCR0FaJgffmFdJwYDcRw45H0rikLKY:uk+5nD7BaJgWFda4cJq
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2