1c5d7b49a5ae8a272ec506d63815166ca07d7117076bfea4e1b7e331b19db0fe | Triage

Sharing

General

Target

020b538195f8a08e26e68529f09a5969_JaffaCakes118
Size

498KB
Sample

240620-cyp2raybkl
MD5

020b538195f8a08e26e68529f09a5969
SHA1

8022b72668bc9666d59a998be3fa9871be346da9
SHA256

1c5d7b49a5ae8a272ec506d63815166ca07d7117076bfea4e1b7e331b19db0fe
SHA512

00664ee3124aa446e0b42775495e457b702c1bf5ec54cb18e956a401760d20176a7f27af16ed9325b9f3290b372f0b219d271961f1355c332dc77069377a22a6
SSDEEP

12288:bsIoZC6TeqNX6QJi511RIiMdNo1BGOqqT8hr5jBXb8G:bY3Lg5jeXo1BGo8hJ

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  020b538195f8a08e26e68529f09a5969_JaffaCakes118
- Size
  
  498KB
- MD5
  
  020b538195f8a08e26e68529f09a5969
- SHA1
  
  8022b72668bc9666d59a998be3fa9871be346da9
- SHA256
  
  1c5d7b49a5ae8a272ec506d63815166ca07d7117076bfea4e1b7e331b19db0fe
- SHA512
  
  00664ee3124aa446e0b42775495e457b702c1bf5ec54cb18e956a401760d20176a7f27af16ed9325b9f3290b372f0b219d271961f1355c332dc77069377a22a6
- SSDEEP
  
  12288:bsIoZC6TeqNX6QJi511RIiMdNo1BGOqqT8hr5jBXb8G:bY3Lg5jeXo1BGo8hJ
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2