7373a64efaf34a9d05ede5f1f4e39427c4605440e161476134a1ad1ca18f0238 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74c391f77afb689ca1c689230ad76dfb_JaffaCakes118
Size

272KB
Sample

240726-tlnftsybql
MD5

74c391f77afb689ca1c689230ad76dfb
SHA1

a6ef2ffd3d5ac94142230ee61e0d59b4c85ae2f5
SHA256

7373a64efaf34a9d05ede5f1f4e39427c4605440e161476134a1ad1ca18f0238
SHA512

319bb325b9e251a841bb5dcc3aa822c2d229392c4d3c287777b64e7b11c825500b76b728f90fbe8a680da32978589a01273cd8ab651681c2ef94f8de7082b130
SSDEEP

6144:olVLA3i9YkleyFYKUjVZVq6lnYCvRyxKsWsMsc4Q1H7ZdHq:YdUtBZTnhvRyWsMsc4Q1/K

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  74c391f77afb689ca1c689230ad76dfb_JaffaCakes118
- Size
  
  272KB
- MD5
  
  74c391f77afb689ca1c689230ad76dfb
- SHA1
  
  a6ef2ffd3d5ac94142230ee61e0d59b4c85ae2f5
- SHA256
  
  7373a64efaf34a9d05ede5f1f4e39427c4605440e161476134a1ad1ca18f0238
- SHA512
  
  319bb325b9e251a841bb5dcc3aa822c2d229392c4d3c287777b64e7b11c825500b76b728f90fbe8a680da32978589a01273cd8ab651681c2ef94f8de7082b130
- SSDEEP
  
  6144:olVLA3i9YkleyFYKUjVZVq6lnYCvRyxKsWsMsc4Q1H7ZdHq:YdUtBZTnhvRyWsMsc4Q1/K
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence