3a3fb70cb01da52f381e452cabb5db9b4ce1a92d484a0a8dd340dc50c7e3b136 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c957e3c7f5959bca47020f93c16947b_JaffaCakes118
Size

68KB
Sample

240812-an1z6awemq
MD5

8c957e3c7f5959bca47020f93c16947b
SHA1

73caee42af1db010c6642825c25e85b1952e3b12
SHA256

3a3fb70cb01da52f381e452cabb5db9b4ce1a92d484a0a8dd340dc50c7e3b136
SHA512

ea021d2a70361b4f9513190148ea126fa0cbb5e4bdb68bf55f5fd3a793edec91b68a3d6c2de67699e0230bd4090542173a8810587898c74b9f17d310c5fed44e
SSDEEP

768:NV33u4nvypr/Ldm8//be+FG6kYJMmw4wALhzVe8sOzqEM:N53ul/oY7wQuEM

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  8c957e3c7f5959bca47020f93c16947b_JaffaCakes118
- Size
  
  68KB
- MD5
  
  8c957e3c7f5959bca47020f93c16947b
- SHA1
  
  73caee42af1db010c6642825c25e85b1952e3b12
- SHA256
  
  3a3fb70cb01da52f381e452cabb5db9b4ce1a92d484a0a8dd340dc50c7e3b136
- SHA512
  
  ea021d2a70361b4f9513190148ea126fa0cbb5e4bdb68bf55f5fd3a793edec91b68a3d6c2de67699e0230bd4090542173a8810587898c74b9f17d310c5fed44e
- SSDEEP
  
  768:NV33u4nvypr/Ldm8//be+FG6kYJMmw4wALhzVe8sOzqEM:N53ul/oY7wQuEM
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence