856c63730579e6acfe48e9ff194f5ca2152e169a98145bc3da8f3dbb1be20fc9 | Triage

Sharing

General

Target

eb4ff1c7b2a7e5be4385e0b6b74daf7c_JaffaCakes118
Size

214KB
Sample

240410-r6nk8abg33
MD5

eb4ff1c7b2a7e5be4385e0b6b74daf7c
SHA1

d58345e784a1ec1f85593df7a626aba96b81b26a
SHA256

856c63730579e6acfe48e9ff194f5ca2152e169a98145bc3da8f3dbb1be20fc9
SHA512

aec6a961aba4a66374be1b4319e3457ae99a582dc76d963779690c4fe75a98ef4c02f2bad59fd27f3f12f8af6b022f003bc918f91c0356ae2f24b38eb09c7eab
SSDEEP

3072:60HL/gRKIsVMAQF1MdBvEGoYjXC7rHmz233fZ3AUazIftvdrj6:6MgKNST1MdBvHoYjXCK4vZ3ALzIftvV

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  eb4ff1c7b2a7e5be4385e0b6b74daf7c_JaffaCakes118
- Size
  
  214KB
- MD5
  
  eb4ff1c7b2a7e5be4385e0b6b74daf7c
- SHA1
  
  d58345e784a1ec1f85593df7a626aba96b81b26a
- SHA256
  
  856c63730579e6acfe48e9ff194f5ca2152e169a98145bc3da8f3dbb1be20fc9
- SHA512
  
  aec6a961aba4a66374be1b4319e3457ae99a582dc76d963779690c4fe75a98ef4c02f2bad59fd27f3f12f8af6b022f003bc918f91c0356ae2f24b38eb09c7eab
- SSDEEP
  
  3072:60HL/gRKIsVMAQF1MdBvEGoYjXC7rHmz233fZ3AUazIftvdrj6:6MgKNST1MdBvHoYjXCK4vZ3ALzIftvV
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2