a30a32b49bbd70422b8d7fa61791c15808ae5e5e982e062f1fa787c287d445a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2671cd44b25836e0130c190c03776e44_JaffaCakes118
Size

389KB
Sample

240704-2bnmvasfkj
MD5

2671cd44b25836e0130c190c03776e44
SHA1

b663f7b620a3e125c240635c9c9c8dbbc878e67e
SHA256

a30a32b49bbd70422b8d7fa61791c15808ae5e5e982e062f1fa787c287d445a8
SHA512

1ddd2c15e12f9f0d05d5cfba71b93aef1fb09c7fc650a2d9d4d6ba85f98b4835dee3f7b980b5ecad90affa0c334da94d6def5732698930d0c74f1744c652a4bf
SSDEEP

6144:oxtap1VCROEAK5tQRVCCRuqygi5JQ/AbVFb/vmmBSs3nle1gygSEl:utap1UROEAKXa0BJQOHws3nYrK

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2671cd44b25836e0130c190c03776e44_JaffaCakes118
- Size
  
  389KB
- MD5
  
  2671cd44b25836e0130c190c03776e44
- SHA1
  
  b663f7b620a3e125c240635c9c9c8dbbc878e67e
- SHA256
  
  a30a32b49bbd70422b8d7fa61791c15808ae5e5e982e062f1fa787c287d445a8
- SHA512
  
  1ddd2c15e12f9f0d05d5cfba71b93aef1fb09c7fc650a2d9d4d6ba85f98b4835dee3f7b980b5ecad90affa0c334da94d6def5732698930d0c74f1744c652a4bf
- SSDEEP
  
  6144:oxtap1VCROEAK5tQRVCCRuqygi5JQ/AbVFb/vmmBSs3nle1gygSEl:utap1UROEAKXa0BJQOHws3nYrK
Score

8^/10

persistence
- Sets service image path in registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2