5fcc4faec1f0368476873b10a6d05bcf46b12f11c2d8ff416292b6500c3d1389 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

609da30f04329213179d724c3cdf3789_JaffaCakes118
Size

1.7MB
Sample

240721-p5pqsa1gkd
MD5

609da30f04329213179d724c3cdf3789
SHA1

6843690fae23b9735fdbe75dd1c36f7be09b6d8b
SHA256

5fcc4faec1f0368476873b10a6d05bcf46b12f11c2d8ff416292b6500c3d1389
SHA512

8785fff25c7a970c1f6f94fe295786ac49215adac34a06aeb719128388d4386d6c4bcadda087d3cf3f5fedabf5703ad769154913dc0f50f8e8b6d8ca211cffde
SSDEEP

49152:MS0zSiuQCdq1UuleRcujnGv7WuHbTfwopI5JEcLwKAzRp:USipLpcRcujg7Tfni5J3LrAzRp

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  609da30f04329213179d724c3cdf3789_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  609da30f04329213179d724c3cdf3789
- SHA1
  
  6843690fae23b9735fdbe75dd1c36f7be09b6d8b
- SHA256
  
  5fcc4faec1f0368476873b10a6d05bcf46b12f11c2d8ff416292b6500c3d1389
- SHA512
  
  8785fff25c7a970c1f6f94fe295786ac49215adac34a06aeb719128388d4386d6c4bcadda087d3cf3f5fedabf5703ad769154913dc0f50f8e8b6d8ca211cffde
- SSDEEP
  
  49152:MS0zSiuQCdq1UuleRcujnGv7WuHbTfwopI5JEcLwKAzRp:USipLpcRcujg7Tfni5J3LrAzRp
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2