41727edb959a35ad45e4cabb7b97e2973b0dc929ae22023f9e69472ec4477aa7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f418974899e683062ec7ca4706df08_JaffaCakes118
Size

396KB
Sample

240817-dgkldatdjc
MD5

a0f418974899e683062ec7ca4706df08
SHA1

cfa40f2755e95f317cd173eccf43ff2f5b9631fd
SHA256

41727edb959a35ad45e4cabb7b97e2973b0dc929ae22023f9e69472ec4477aa7
SHA512

d010e27ddb95110eaefd10ea4ce4a8e7018be5b8f32b1be50d1823378840e4fddba6397896a6559dc21c4b49d8bf981c1364ba02f8af6007f242ad54224b2943
SSDEEP

6144:8kqHdq19KTOYc2x/WP81OfUKxBYNWDC7KLWmwExiOSml:7qHdq19KreE1OGW270WoVF

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a0f418974899e683062ec7ca4706df08_JaffaCakes118
- Size
  
  396KB
- MD5
  
  a0f418974899e683062ec7ca4706df08
- SHA1
  
  cfa40f2755e95f317cd173eccf43ff2f5b9631fd
- SHA256
  
  41727edb959a35ad45e4cabb7b97e2973b0dc929ae22023f9e69472ec4477aa7
- SHA512
  
  d010e27ddb95110eaefd10ea4ce4a8e7018be5b8f32b1be50d1823378840e4fddba6397896a6559dc21c4b49d8bf981c1364ba02f8af6007f242ad54224b2943
- SSDEEP
  
  6144:8kqHdq19KTOYc2x/WP81OfUKxBYNWDC7KLWmwExiOSml:7qHdq19KreE1OGW270WoVF
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence