05d32501cf0298d48a6acaf1968201d75782499db00297f4338528528e2a8c52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76d5e47bd547b91d11f1a9457a90f00f_JaffaCakes118
Size

32KB
Sample

240727-dnkvqatcpp
MD5

76d5e47bd547b91d11f1a9457a90f00f
SHA1

0f08b793de1795139fee182a176737cd6a6c186e
SHA256

05d32501cf0298d48a6acaf1968201d75782499db00297f4338528528e2a8c52
SHA512

9ed2f410bc9eb2d7fb1e97a5483c698535a0df6eaa49c1f1c24cc98174a43d638a52f213ce70b7cb8bb086f50ffc33f431fcc5e48a3e8692ad15733841e27f72
SSDEEP

768:F+BmWOU1CFyuPb9j8UaLc46F+aZHvgymQfU:F+BmWOU1UyuPb9jLaLc46F+aZHvgym1

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  76d5e47bd547b91d11f1a9457a90f00f_JaffaCakes118
- Size
  
  32KB
- MD5
  
  76d5e47bd547b91d11f1a9457a90f00f
- SHA1
  
  0f08b793de1795139fee182a176737cd6a6c186e
- SHA256
  
  05d32501cf0298d48a6acaf1968201d75782499db00297f4338528528e2a8c52
- SHA512
  
  9ed2f410bc9eb2d7fb1e97a5483c698535a0df6eaa49c1f1c24cc98174a43d638a52f213ce70b7cb8bb086f50ffc33f431fcc5e48a3e8692ad15733841e27f72
- SSDEEP
  
  768:F+BmWOU1CFyuPb9j8UaLc46F+aZHvgymQfU:F+BmWOU1UyuPb9jLaLc46F+aZHvgym1
Score

6^/10

persistence discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence