e01a7d767803819e4909e95c0d31c45307eac120275b0fd2a12413f43b8dd17e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37f3b8d911288cab2153d31fbbb4cfa3_JaffaCakes118
Size

2.6MB
Sample

240711-gndcesscpk
MD5

37f3b8d911288cab2153d31fbbb4cfa3
SHA1

95007a502f334750b29087e880e3d8e7584bfdd1
SHA256

e01a7d767803819e4909e95c0d31c45307eac120275b0fd2a12413f43b8dd17e
SHA512

b3fb688cf6e9ef88c52717a47cc5607b70b5860aeb95763a4a04a4f09e12bab38aeec2d92e2d92adf0f3f9728dc6bd987431734126e62de4ec44aac143013ee8
SSDEEP

49152:H+DOKxlhI1VF4YCO3E/3FLvx25Ev/HdefnbPVHjEp3ifUs2WUH7AAzWTci:Hl2YB3E/VLv05E+nbPVZfUs2phz4c

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  37f3b8d911288cab2153d31fbbb4cfa3_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  37f3b8d911288cab2153d31fbbb4cfa3
- SHA1
  
  95007a502f334750b29087e880e3d8e7584bfdd1
- SHA256
  
  e01a7d767803819e4909e95c0d31c45307eac120275b0fd2a12413f43b8dd17e
- SHA512
  
  b3fb688cf6e9ef88c52717a47cc5607b70b5860aeb95763a4a04a4f09e12bab38aeec2d92e2d92adf0f3f9728dc6bd987431734126e62de4ec44aac143013ee8
- SSDEEP
  
  49152:H+DOKxlhI1VF4YCO3E/3FLvx25Ev/HdefnbPVHjEp3ifUs2WUH7AAzWTci:Hl2YB3E/VLv05E+nbPVZfUs2phz4c
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2