14a5230a26487c66fde9aab2bae43a6780af18e8bf3be9ebce5312d0c74aa9f7 | Triage

Sharing

General

Target

a00ad573cf59cea0f4e5ee51047b414c_JaffaCakes118
Size

575KB
Sample

240816-1j6myssdml
MD5

a00ad573cf59cea0f4e5ee51047b414c
SHA1

d3eb1f30977eae928f5ebd6156e48a32409a1c1d
SHA256

14a5230a26487c66fde9aab2bae43a6780af18e8bf3be9ebce5312d0c74aa9f7
SHA512

81d7ce8cc87f2ccfd16f9bb9b5c5373bcbb1dcd2d34f1abd8018a3e6572fb6d46b5e9bb1167c83404bd391e87dc5c7ff1d6343bc76f71e05da9a2b1994f0c4f3
SSDEEP

12288:MhKfKhK8xxdaH4Ea0Ix33NPRo8GHSAjzYHIrlU4APkl:MnlxdaHENFGHS/UlU6l

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a00ad573cf59cea0f4e5ee51047b414c_JaffaCakes118
- Size
  
  575KB
- MD5
  
  a00ad573cf59cea0f4e5ee51047b414c
- SHA1
  
  d3eb1f30977eae928f5ebd6156e48a32409a1c1d
- SHA256
  
  14a5230a26487c66fde9aab2bae43a6780af18e8bf3be9ebce5312d0c74aa9f7
- SHA512
  
  81d7ce8cc87f2ccfd16f9bb9b5c5373bcbb1dcd2d34f1abd8018a3e6572fb6d46b5e9bb1167c83404bd391e87dc5c7ff1d6343bc76f71e05da9a2b1994f0c4f3
- SSDEEP
  
  12288:MhKfKhK8xxdaH4Ea0Ix33NPRo8GHSAjzYHIrlU4APkl:MnlxdaHENFGHS/UlU6l
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence