a72891ad84b8ebeaa4ae17bb5d84602c24104b9db634d97aa777a2bdc661f642 | Triage

Sharing

General

Target

70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118
Size

44KB
Sample

240725-yhw11stgpe
MD5

70f9f1662d6e6f606be42e1eb3e967ea
SHA1

9afd13440757732c99c3d0ecfec59c11ae4aae53
SHA256

a72891ad84b8ebeaa4ae17bb5d84602c24104b9db634d97aa777a2bdc661f642
SHA512

1f6efbd421bc49203e194e3b4a6aac7b21a3307ccd65f35ed3fc3fc554d7c063d26e9152210755e94536bfd4da84c7a56dbc3d6758045dcc2fb7bf797b83de08
SSDEEP

768:wc+ceWdva7R8FWUNa/pja6dTj3nCkuOVyXxauh7G0BhdQ6wukN53Gl:wseMa7aFWka/pja6dTrPuz0uh75M7r

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118
- Size
  
  44KB
- MD5
  
  70f9f1662d6e6f606be42e1eb3e967ea
- SHA1
  
  9afd13440757732c99c3d0ecfec59c11ae4aae53
- SHA256
  
  a72891ad84b8ebeaa4ae17bb5d84602c24104b9db634d97aa777a2bdc661f642
- SHA512
  
  1f6efbd421bc49203e194e3b4a6aac7b21a3307ccd65f35ed3fc3fc554d7c063d26e9152210755e94536bfd4da84c7a56dbc3d6758045dcc2fb7bf797b83de08
- SSDEEP
  
  768:wc+ceWdva7R8FWUNa/pja6dTj3nCkuOVyXxauh7G0BhdQ6wukN53Gl:wseMa7aFWka/pja6dTrPuz0uh75M7r
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence