39d6879b202b57f3f652b9dfddee128c892530310b6c5e9bbaec40c822c6cbef | Triage

Sharing

General

Target

JaffaCakes118_99a7c4a190dc17e0bab7bc249c47682d
Size

34KB
Sample

250331-sqmvesswhx
MD5

99a7c4a190dc17e0bab7bc249c47682d
SHA1

f85eacf08527f929d89b149badc6508c50bec218
SHA256

39d6879b202b57f3f652b9dfddee128c892530310b6c5e9bbaec40c822c6cbef
SHA512

b9f53820e5eab9c1da0c087a47e5c914bdf93820a5ff4505776f8586a0ac69eca0ae85549cc0d31a9187c564282ed3569f483702285297297cb9fb26e417ae64
SSDEEP

768:VdRznZg/qGzA2Tm4VJvSk/ozg15gEgLa1EFuYd8CbMX3:Vd1dGzA2C4VFSk/ozg15glLaHYMH

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_99a7c4a190dc17e0bab7bc249c47682d
- Size
  
  34KB
- MD5
  
  99a7c4a190dc17e0bab7bc249c47682d
- SHA1
  
  f85eacf08527f929d89b149badc6508c50bec218
- SHA256
  
  39d6879b202b57f3f652b9dfddee128c892530310b6c5e9bbaec40c822c6cbef
- SHA512
  
  b9f53820e5eab9c1da0c087a47e5c914bdf93820a5ff4505776f8586a0ac69eca0ae85549cc0d31a9187c564282ed3569f483702285297297cb9fb26e417ae64
- SSDEEP
  
  768:VdRznZg/qGzA2Tm4VJvSk/ozg15gEgLa1EFuYd8CbMX3:Vd1dGzA2C4VFSk/ozg15glLaHYMH
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence