f7e16ed08f0ed03e8d5f520216f051a2cd4604defa87b937685a449c449b12b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

226789f5d6c992debdd10df7756c6cde_JaffaCakes118
Size

68KB
Sample

240703-psqsbavemf
MD5

226789f5d6c992debdd10df7756c6cde
SHA1

8e8ad2a5b5dfd8b9907ef5969e87c4496023fa65
SHA256

f7e16ed08f0ed03e8d5f520216f051a2cd4604defa87b937685a449c449b12b7
SHA512

855ef28ffcdc50d994b71ee5cef13cf38be7360b6ef377dbcd2d5a333e36c32e3a08991d51b8fc7b81ef186e5dee0dc735d05aea245075f7486b492d24d34c26
SSDEEP

1536:FNxU+W+73uSpoo3e/8+dcr2yS72WboWWW1/:NU+W+qNo3e9Sy/9sWWW1

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  226789f5d6c992debdd10df7756c6cde_JaffaCakes118
- Size
  
  68KB
- MD5
  
  226789f5d6c992debdd10df7756c6cde
- SHA1
  
  8e8ad2a5b5dfd8b9907ef5969e87c4496023fa65
- SHA256
  
  f7e16ed08f0ed03e8d5f520216f051a2cd4604defa87b937685a449c449b12b7
- SHA512
  
  855ef28ffcdc50d994b71ee5cef13cf38be7360b6ef377dbcd2d5a333e36c32e3a08991d51b8fc7b81ef186e5dee0dc735d05aea245075f7486b492d24d34c26
- SSDEEP
  
  1536:FNxU+W+73uSpoo3e/8+dcr2yS72WboWWW1/:NU+W+qNo3e9Sy/9sWWW1
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2