4f95d6fb744ea492f3df69d527f50dadaa13f664dbddc7149ef894ac563ae17e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88ec2a449547f6e1b07b476e97947c4b_JaffaCakes118
Size

167KB
Sample

240811-emg8wathpm
MD5

88ec2a449547f6e1b07b476e97947c4b
SHA1

f173d3d4dbad1eedb89c1871b97b44d21b0016f2
SHA256

4f95d6fb744ea492f3df69d527f50dadaa13f664dbddc7149ef894ac563ae17e
SHA512

61e7e55abc9bf56322daa7904c716fa2b355f6ca81117ebde491f13b3f83ce67dc6d6aa39b14f3b92be2e482c6227e4b8f557d8b1ce0b4dc22190f9c1773f0b3
SSDEEP

3072:qoJLQ/DbISwTN8wZoZZBDbUC/NuLQCIAOFDdNj76kcKyqjyNVgVC8SGM4xk:4wSwGZ/bENOFDjj7pcKLjogVCH

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  88ec2a449547f6e1b07b476e97947c4b_JaffaCakes118
- Size
  
  167KB
- MD5
  
  88ec2a449547f6e1b07b476e97947c4b
- SHA1
  
  f173d3d4dbad1eedb89c1871b97b44d21b0016f2
- SHA256
  
  4f95d6fb744ea492f3df69d527f50dadaa13f664dbddc7149ef894ac563ae17e
- SHA512
  
  61e7e55abc9bf56322daa7904c716fa2b355f6ca81117ebde491f13b3f83ce67dc6d6aa39b14f3b92be2e482c6227e4b8f557d8b1ce0b4dc22190f9c1773f0b3
- SSDEEP
  
  3072:qoJLQ/DbISwTN8wZoZZBDbUC/NuLQCIAOFDdNj76kcKyqjyNVgVC8SGM4xk:4wSwGZ/bENOFDjj7pcKLjogVCH
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence