c3a8862c6d40241588d1b4e01523f7e9a97f71dae77d7316c7814de8a52321f4 | Triage

Sharing

General

Target

f47292822d37ac25baa57164e44279c6_JaffaCakes118
Size

132KB
Sample

240416-15nz2aea96
MD5

f47292822d37ac25baa57164e44279c6
SHA1

2a7842d1149d3c7d4811d732d9b03e5ab3dfef37
SHA256

c3a8862c6d40241588d1b4e01523f7e9a97f71dae77d7316c7814de8a52321f4
SHA512

a2dbb1c8a97cb8b01123c2253bdf485c64a1af5ae9cdc90387dfa0d50d3e5079f55b943eb63a6c6f1f29d7fa318b184db2d9625030ab88b3f2a9b4671b457de4
SSDEEP

3072:PjX5N8c1LiTy8xPisdAISbbsqRXgOlRXJdga/3yyLQjV:wmwy8x66ArbbsqRXRga/3zQ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  f47292822d37ac25baa57164e44279c6_JaffaCakes118
- Size
  
  132KB
- MD5
  
  f47292822d37ac25baa57164e44279c6
- SHA1
  
  2a7842d1149d3c7d4811d732d9b03e5ab3dfef37
- SHA256
  
  c3a8862c6d40241588d1b4e01523f7e9a97f71dae77d7316c7814de8a52321f4
- SHA512
  
  a2dbb1c8a97cb8b01123c2253bdf485c64a1af5ae9cdc90387dfa0d50d3e5079f55b943eb63a6c6f1f29d7fa318b184db2d9625030ab88b3f2a9b4671b457de4
- SSDEEP
  
  3072:PjX5N8c1LiTy8xPisdAISbbsqRXgOlRXJdga/3yyLQjV:wmwy8x66ArbbsqRXRga/3zQ
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2