429aac465a2eaab400c161f7c4d06287a1730b563e62e7e7c5d8446d24030b77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95168c74a7297ad736bfef8378a407b7_JaffaCakes118
Size

482KB
Sample

240814-hxpx9aygme
MD5

95168c74a7297ad736bfef8378a407b7
SHA1

c58e87410fb7fd548cf47c37bcccfcd49486faae
SHA256

429aac465a2eaab400c161f7c4d06287a1730b563e62e7e7c5d8446d24030b77
SHA512

68c80f5806fec54fb15abb27da5c047c0d134a32ea262114f6ea64c0f9bd0805630e7eead3772b11c09281db3ad980ca95bb37b078ae549270df3d1b74a7eb76
SSDEEP

12288:0jlWsmXbm7IejF6058t8A7RnkLG9qMyuoNnp:0peXReh6058VNK6j+n

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  95168c74a7297ad736bfef8378a407b7_JaffaCakes118
- Size
  
  482KB
- MD5
  
  95168c74a7297ad736bfef8378a407b7
- SHA1
  
  c58e87410fb7fd548cf47c37bcccfcd49486faae
- SHA256
  
  429aac465a2eaab400c161f7c4d06287a1730b563e62e7e7c5d8446d24030b77
- SHA512
  
  68c80f5806fec54fb15abb27da5c047c0d134a32ea262114f6ea64c0f9bd0805630e7eead3772b11c09281db3ad980ca95bb37b078ae549270df3d1b74a7eb76
- SSDEEP
  
  12288:0jlWsmXbm7IejF6058t8A7RnkLG9qMyuoNnp:0peXReh6058VNK6j+n
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence