5f055b6b565c0609fe6601db897940ad85c3c469dad6470c7e7b54b90b757a21 | Triage

Sharing

General

Target

f4851a9b321c5cc06594246c43006c2c_JaffaCakes118
Size

73KB
Sample

240416-2z9j8age5s
MD5

f4851a9b321c5cc06594246c43006c2c
SHA1

c7e9b2a49f12fb86edd51bd41f4fdb1ff525843b
SHA256

5f055b6b565c0609fe6601db897940ad85c3c469dad6470c7e7b54b90b757a21
SHA512

8619560c1bd2cb5033847a0ae92809fbaa86d658a3176814abd7bc47902cf86629eb42fe1e7c12ab05b94c5887b86f74ce805502136f678316d37b6737fae3af
SSDEEP

1536:hO0s6t9laAGclKen/jFnToIfHTRzr5JBAZeiFp0zA+V/R8:c0s6tien/jtTBfHTRzr5JBAZeiP0Z

Score

8^/10

persistence vmprotect

Malware Config

Targets

- Target
  
  f4851a9b321c5cc06594246c43006c2c_JaffaCakes118
- Size
  
  73KB
- MD5
  
  f4851a9b321c5cc06594246c43006c2c
- SHA1
  
  c7e9b2a49f12fb86edd51bd41f4fdb1ff525843b
- SHA256
  
  5f055b6b565c0609fe6601db897940ad85c3c469dad6470c7e7b54b90b757a21
- SHA512
  
  8619560c1bd2cb5033847a0ae92809fbaa86d658a3176814abd7bc47902cf86629eb42fe1e7c12ab05b94c5887b86f74ce805502136f678316d37b6737fae3af
- SSDEEP
  
  1536:hO0s6t9laAGclKen/jFnToIfHTRzr5JBAZeiFp0zA+V/R8:c0s6tien/jtTBfHTRzr5JBAZeiP0Z
Score

8^/10

persistence
- Sets DLL path for service in the registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2