5fadafd163d1e04a805ab4015b75d6f9bce954e565b8d3511122c1172328ba8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84ae9ff12e736bc074ccf44534810462_JaffaCakes118
Size

320KB
Sample

240810-eag3cathrj
MD5

84ae9ff12e736bc074ccf44534810462
SHA1

94f829a585005bdb88fc2ba729da9d0a11648639
SHA256

5fadafd163d1e04a805ab4015b75d6f9bce954e565b8d3511122c1172328ba8b
SHA512

73325016d8cd5d8f7bc4a1b44aec02b1eead73b2cd4e567ed23d40c1bb93c01f4c9360042bda9c337d4b78e36ab0383da1759cfb4b6323bce4af128a57a0edbe
SSDEEP

3072:pb/QUpoBIYAZ24QAvKeuqnUITsYJZqZpxXdbiNJY9Gv6xDOatdM+/d04FtR:pbPpoBIYAZrvKGRA9DbmJY9U9aM+/dP

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  84ae9ff12e736bc074ccf44534810462_JaffaCakes118
- Size
  
  320KB
- MD5
  
  84ae9ff12e736bc074ccf44534810462
- SHA1
  
  94f829a585005bdb88fc2ba729da9d0a11648639
- SHA256
  
  5fadafd163d1e04a805ab4015b75d6f9bce954e565b8d3511122c1172328ba8b
- SHA512
  
  73325016d8cd5d8f7bc4a1b44aec02b1eead73b2cd4e567ed23d40c1bb93c01f4c9360042bda9c337d4b78e36ab0383da1759cfb4b6323bce4af128a57a0edbe
- SSDEEP
  
  3072:pb/QUpoBIYAZ24QAvKeuqnUITsYJZqZpxXdbiNJY9Gv6xDOatdM+/d04FtR:pbPpoBIYAZrvKGRA9DbmJY9U9aM+/dP
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence