5a55d3320cd3d8af200e2652d4ad4db5f0f7a82c5bc202ee2fb0fd42edc08ec8 | Triage

Sharing

General

Target

8319abc05eb0ae7250dca3fd5d322fe1_JaffaCakes118
Size

131KB
Sample

240802-fg6vqawhrr
MD5

8319abc05eb0ae7250dca3fd5d322fe1
SHA1

591668b27f117a4625eab22e807466aa9e68b92c
SHA256

5a55d3320cd3d8af200e2652d4ad4db5f0f7a82c5bc202ee2fb0fd42edc08ec8
SHA512

81e9af70871b589de8442bb038a2a8b8c8280f6773e77d3f829986633d330b44060e39d3cc5583a70913c7a42d16247fe7b835f86f1283c405949b0cde9e4916
SSDEEP

3072:Xu/+LL2+z3CuKFm+8V/JaDRID+ClMswVuwFNXwgTu:X3Lx7Cu6mhxURJCjwFNT

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  8319abc05eb0ae7250dca3fd5d322fe1_JaffaCakes118
- Size
  
  131KB
- MD5
  
  8319abc05eb0ae7250dca3fd5d322fe1
- SHA1
  
  591668b27f117a4625eab22e807466aa9e68b92c
- SHA256
  
  5a55d3320cd3d8af200e2652d4ad4db5f0f7a82c5bc202ee2fb0fd42edc08ec8
- SHA512
  
  81e9af70871b589de8442bb038a2a8b8c8280f6773e77d3f829986633d330b44060e39d3cc5583a70913c7a42d16247fe7b835f86f1283c405949b0cde9e4916
- SSDEEP
  
  3072:Xu/+LL2+z3CuKFm+8V/JaDRID+ClMswVuwFNXwgTu:X3Lx7Cu6mhxURJCjwFNT
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence