ac31e0c06b09becfc62073749964ccbcfd8427a4280518eeb22eea961033ba00 | Triage

Sharing

General

Target

62984551de5fec18e6f3f6c2d0e3b380_JaffaCakes118
Size

109KB
Sample

240722-kwcmmszamr
MD5

62984551de5fec18e6f3f6c2d0e3b380
SHA1

94454eb2901b831d240a715dd44961acfb60154b
SHA256

ac31e0c06b09becfc62073749964ccbcfd8427a4280518eeb22eea961033ba00
SHA512

848e5fee4289b484f065cb1a4c40fa01b4e4991781aebc9a735737e666d4fd7251448e675d671c626114d619629f625df5aee51355e2bdb2123ae086d2c3e15a
SSDEEP

3072:aswwRbzNuJzYShw5GnpTL8wJ7G/oBZq+efLOyzrI5LzvWisLgSL:lRb2sYVpsMQ+YLOgGK9M

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  62984551de5fec18e6f3f6c2d0e3b380_JaffaCakes118
- Size
  
  109KB
- MD5
  
  62984551de5fec18e6f3f6c2d0e3b380
- SHA1
  
  94454eb2901b831d240a715dd44961acfb60154b
- SHA256
  
  ac31e0c06b09becfc62073749964ccbcfd8427a4280518eeb22eea961033ba00
- SHA512
  
  848e5fee4289b484f065cb1a4c40fa01b4e4991781aebc9a735737e666d4fd7251448e675d671c626114d619629f625df5aee51355e2bdb2123ae086d2c3e15a
- SSDEEP
  
  3072:aswwRbzNuJzYShw5GnpTL8wJ7G/oBZq+efLOyzrI5LzvWisLgSL:lRb2sYVpsMQ+YLOgGK9M
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2