19d025f90abd29e4c5cd54f52cef4bf5c794593f59abff333b76f3de6a4a2c70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74aa9a7f0cbfadd346b9ea753bd5301e_JaffaCakes118
Size

188KB
Sample

240726-s3498szgkf
MD5

74aa9a7f0cbfadd346b9ea753bd5301e
SHA1

290ccb5e0992aeffd71e601671dd06d5fd10fadc
SHA256

19d025f90abd29e4c5cd54f52cef4bf5c794593f59abff333b76f3de6a4a2c70
SHA512

43983b592c7d2e02b6af466b5c99241937906e9ca720d98ff76515c025571e18fbb63b5841c60de651d5c110e69f0b24c92896d7276a70df358fc8ce46125ff7
SSDEEP

1536:IrvC4f5Xtm/CPLgGhrqcoezyPnlUnlug3MQOL0Rt8YncJbzLcHG6ozryyx:Irvh8OhrnhzyKnlug8r0L8YcJb2Aryyx

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  74aa9a7f0cbfadd346b9ea753bd5301e_JaffaCakes118
- Size
  
  188KB
- MD5
  
  74aa9a7f0cbfadd346b9ea753bd5301e
- SHA1
  
  290ccb5e0992aeffd71e601671dd06d5fd10fadc
- SHA256
  
  19d025f90abd29e4c5cd54f52cef4bf5c794593f59abff333b76f3de6a4a2c70
- SHA512
  
  43983b592c7d2e02b6af466b5c99241937906e9ca720d98ff76515c025571e18fbb63b5841c60de651d5c110e69f0b24c92896d7276a70df358fc8ce46125ff7
- SSDEEP
  
  1536:IrvC4f5Xtm/CPLgGhrqcoezyPnlUnlug3MQOL0Rt8YncJbzLcHG6ozryyx:Irvh8OhrnhzyKnlug8r0L8YcJb2Aryyx
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence