gh0strat | 2f244e874c86f20b007063d1c95cd38d6154665e9baff63c15ba02899fd99a59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88260d25d8851594f2fc0cd0a56d661b_JaffaCakes118
Size

114KB
Sample

240810-3q2zfsthrl
MD5

88260d25d8851594f2fc0cd0a56d661b
SHA1

9079e2c42c99439d1b3e63ec8516cd8bc56bd5b2
SHA256

2f244e874c86f20b007063d1c95cd38d6154665e9baff63c15ba02899fd99a59
SHA512

846e3f2e486931d72d623aca2436934b31f22d1a55cd883ddc57a692bfa0b3d8a6d955e2fe651812967f4c8804f73cf9a7a1dcb6de04f54592f2235293386252
SSDEEP

3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KuiCbmN:Mpl2GkGMkSgb8Svlu5KuON

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  88260d25d8851594f2fc0cd0a56d661b_JaffaCakes118
- Size
  
  114KB
- MD5
  
  88260d25d8851594f2fc0cd0a56d661b
- SHA1
  
  9079e2c42c99439d1b3e63ec8516cd8bc56bd5b2
- SHA256
  
  2f244e874c86f20b007063d1c95cd38d6154665e9baff63c15ba02899fd99a59
- SHA512
  
  846e3f2e486931d72d623aca2436934b31f22d1a55cd883ddc57a692bfa0b3d8a6d955e2fe651812967f4c8804f73cf9a7a1dcb6de04f54592f2235293386252
- SSDEEP
  
  3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KuiCbmN:Mpl2GkGMkSgb8Svlu5KuON
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence