6c7c6101a3de28e0abbb30de69473479e28d518d67d122df5c0b64f1325cb637 | Triage

Sharing

General

Target

5fc85e4419d8733b43b5ae25afb88fbd_JaffaCakes118
Size

70KB
Sample

240720-kjgqtsyang
MD5

5fc85e4419d8733b43b5ae25afb88fbd
SHA1

650b8906819e7b96b82a1788b58c5993c6b71c4a
SHA256

6c7c6101a3de28e0abbb30de69473479e28d518d67d122df5c0b64f1325cb637
SHA512

689b3195c7e79cdca6962911b9de3fe60d3e27ad19ba42e852e261d8b0e28e19aef2eb58b5f707ef21a23a1031adbd721f6b271642d0b518ae9710d46d6bc32d
SSDEEP

1536:ACGeHGDJz+grk1IfNvh1NWgywTFZKKydVYHg9S:AjR+o4gFhZKwg

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5fc85e4419d8733b43b5ae25afb88fbd_JaffaCakes118
- Size
  
  70KB
- MD5
  
  5fc85e4419d8733b43b5ae25afb88fbd
- SHA1
  
  650b8906819e7b96b82a1788b58c5993c6b71c4a
- SHA256
  
  6c7c6101a3de28e0abbb30de69473479e28d518d67d122df5c0b64f1325cb637
- SHA512
  
  689b3195c7e79cdca6962911b9de3fe60d3e27ad19ba42e852e261d8b0e28e19aef2eb58b5f707ef21a23a1031adbd721f6b271642d0b518ae9710d46d6bc32d
- SSDEEP
  
  1536:ACGeHGDJz+grk1IfNvh1NWgywTFZKKydVYHg9S:AjR+o4gFhZKwg
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2