d6bf870da7f13e20e77404c68784e40278cc96857bba0276ed00129a44fd9827 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83304b5ecf590090a213edd5dc207cdc_JaffaCakes118
Size

44KB
Sample

240802-f24k4ashkh
MD5

83304b5ecf590090a213edd5dc207cdc
SHA1

9da5bb38e5f1e365f05f52373d3e1357d8ddbaa0
SHA256

d6bf870da7f13e20e77404c68784e40278cc96857bba0276ed00129a44fd9827
SHA512

d9f5e272014bc9c6bb71f805e0fdd7ffe696c0cdf953a34d3603d9ac221770601817fee5567b94bc5bda2d4d8eba8d0d99a28137a64cb55de23bc0165fdc41b9
SSDEEP

768:FhEomi3PnhZG+YkJuTdcM81GkSZcNmlgo86zEY5ms:FhrjG+J4TdRIG9ZOVni5ms

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  83304b5ecf590090a213edd5dc207cdc_JaffaCakes118
- Size
  
  44KB
- MD5
  
  83304b5ecf590090a213edd5dc207cdc
- SHA1
  
  9da5bb38e5f1e365f05f52373d3e1357d8ddbaa0
- SHA256
  
  d6bf870da7f13e20e77404c68784e40278cc96857bba0276ed00129a44fd9827
- SHA512
  
  d9f5e272014bc9c6bb71f805e0fdd7ffe696c0cdf953a34d3603d9ac221770601817fee5567b94bc5bda2d4d8eba8d0d99a28137a64cb55de23bc0165fdc41b9
- SSDEEP
  
  768:FhEomi3PnhZG+YkJuTdcM81GkSZcNmlgo86zEY5ms:FhrjG+J4TdRIG9ZOVni5ms
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence