fc5a74c93807feb5105e4b91d400c78027b3cfffa7df1063da05b59e4c648627 | Triage

Sharing

General

Target

9fd8175adea2a87494b07d4b3bc7f252_JaffaCakes118
Size

2.1MB
Sample

240816-zezheawaqf
MD5

9fd8175adea2a87494b07d4b3bc7f252
SHA1

aba47e9a618d0f7e991e2de708fe89ea788f29f7
SHA256

fc5a74c93807feb5105e4b91d400c78027b3cfffa7df1063da05b59e4c648627
SHA512

328d0177258e1044c7f63a0ff3b0cd4cb68d3992b60f82c7805af33b26ff0a6b8eee632688c2ce3260014054bb277d449d908585c98fa91775d7ae523b6cd159
SSDEEP

768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4t:tjrAX5NjJHJ+oFE2M/4t

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  9fd8175adea2a87494b07d4b3bc7f252_JaffaCakes118
- Size
  
  2.1MB
- MD5
  
  9fd8175adea2a87494b07d4b3bc7f252
- SHA1
  
  aba47e9a618d0f7e991e2de708fe89ea788f29f7
- SHA256
  
  fc5a74c93807feb5105e4b91d400c78027b3cfffa7df1063da05b59e4c648627
- SHA512
  
  328d0177258e1044c7f63a0ff3b0cd4cb68d3992b60f82c7805af33b26ff0a6b8eee632688c2ce3260014054bb277d449d908585c98fa91775d7ae523b6cd159
- SSDEEP
  
  768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4t:tjrAX5NjJHJ+oFE2M/4t
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence