7f3d263388b4c72cafe5fc6ba51529d8a60348d8843c4dbd1a62399dc6ceaa7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

842529c3e4f830e329420c7cd59d54ae_JaffaCakes118
Size

24KB
Sample

240810-ar61ks1cjf
MD5

842529c3e4f830e329420c7cd59d54ae
SHA1

72295e429a8aea5f3118a952ea36d793982489ea
SHA256

7f3d263388b4c72cafe5fc6ba51529d8a60348d8843c4dbd1a62399dc6ceaa7e
SHA512

693ace49d548005f3539cfa7749c1d10b25f24256eee717c7277dc950fd93893f4e8efdb11f0a0ceecb2eb6be77ff5542238189faa8709a1cc0ddda5a351d51e
SSDEEP

384:E3eVES+/xwGkRKJPYMGlM61qmTTMVF9/q5M0:bGS+ZfbJJGO8qYoAd

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  842529c3e4f830e329420c7cd59d54ae_JaffaCakes118
- Size
  
  24KB
- MD5
  
  842529c3e4f830e329420c7cd59d54ae
- SHA1
  
  72295e429a8aea5f3118a952ea36d793982489ea
- SHA256
  
  7f3d263388b4c72cafe5fc6ba51529d8a60348d8843c4dbd1a62399dc6ceaa7e
- SHA512
  
  693ace49d548005f3539cfa7749c1d10b25f24256eee717c7277dc950fd93893f4e8efdb11f0a0ceecb2eb6be77ff5542238189faa8709a1cc0ddda5a351d51e
- SSDEEP
  
  384:E3eVES+/xwGkRKJPYMGlM61qmTTMVF9/q5M0:bGS+ZfbJJGO8qYoAd
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence