5b6a2ee12e1389f60f3fecf5fea5bfa669694ac516f4a3af0778d566d9e78d81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d71f4c114cfd75dff00d47693b8450_JaffaCakes118
Size

135KB
Sample

240813-1hfp5sxdrd
MD5

94d71f4c114cfd75dff00d47693b8450
SHA1

c843d1cfd56864b41691587becd267958a7939af
SHA256

5b6a2ee12e1389f60f3fecf5fea5bfa669694ac516f4a3af0778d566d9e78d81
SHA512

7deebc32908916cc561f3080bad17578a6742c090b21b7d34c7cb3b8e3af43ca53eb18250f1e3a2a87e0bce2d5144c22d6d8c411acf38b9226fbcc381c82b89a
SSDEEP

3072:jJiscXCpmfQRrIb/RU1jNv2wYeSQCR5N1Lgs9RFtb:jmXzfK8b/i9NpRZC3N10s37b

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  94d71f4c114cfd75dff00d47693b8450_JaffaCakes118
- Size
  
  135KB
- MD5
  
  94d71f4c114cfd75dff00d47693b8450
- SHA1
  
  c843d1cfd56864b41691587becd267958a7939af
- SHA256
  
  5b6a2ee12e1389f60f3fecf5fea5bfa669694ac516f4a3af0778d566d9e78d81
- SHA512
  
  7deebc32908916cc561f3080bad17578a6742c090b21b7d34c7cb3b8e3af43ca53eb18250f1e3a2a87e0bce2d5144c22d6d8c411acf38b9226fbcc381c82b89a
- SSDEEP
  
  3072:jJiscXCpmfQRrIb/RU1jNv2wYeSQCR5N1Lgs9RFtb:jmXzfK8b/i9NpRZC3N10s37b
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2