9ad132da57a72a89de7736b223eb1bbd967967d2700cfda436bd2bd6e2f7a778 | Triage

Sharing

General

Target

70771787363845744ddf25412a6f5110_JaffaCakes118
Size

15KB
Sample

240725-vjss7ssgjj
MD5

70771787363845744ddf25412a6f5110
SHA1

ed65ca32e15420f04b286eec13e565527894d746
SHA256

9ad132da57a72a89de7736b223eb1bbd967967d2700cfda436bd2bd6e2f7a778
SHA512

95cddd5b1d850b5934fd2c387ad954e8260729428ea1c1e20c0a979e982dfe5843c41ddbdb11d0d3cff46b16fc67a68e2e30d169072ac6fb83c7a5648979f866
SSDEEP

384:kWNtMMmyamAn2dKABp26Kp/KIb996n3hJMEhZn3Fy60t:dtMMmya3UBpnqiq99WD3Fy6Q

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  70771787363845744ddf25412a6f5110_JaffaCakes118
- Size
  
  15KB
- MD5
  
  70771787363845744ddf25412a6f5110
- SHA1
  
  ed65ca32e15420f04b286eec13e565527894d746
- SHA256
  
  9ad132da57a72a89de7736b223eb1bbd967967d2700cfda436bd2bd6e2f7a778
- SHA512
  
  95cddd5b1d850b5934fd2c387ad954e8260729428ea1c1e20c0a979e982dfe5843c41ddbdb11d0d3cff46b16fc67a68e2e30d169072ac6fb83c7a5648979f866
- SSDEEP
  
  384:kWNtMMmyamAn2dKABp26Kp/KIb996n3hJMEhZn3Fy60t:dtMMmya3UBpnqiq99WD3Fy6Q
Score

8^/10

persistence discovery
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence