c509fce16b119d58d80aa2d51ee146dbf74b1ac64124da61c90de8210b8bd261 | Triage

Sharing

General

Target

a19dde64bb60c400cfacf553626ea440_JaffaCakes118
Size

2.5MB
Sample

240817-hyd75swgkn
MD5

a19dde64bb60c400cfacf553626ea440
SHA1

c1b7018c3aaf320e6ef0d7cbed0d095b572daaab
SHA256

c509fce16b119d58d80aa2d51ee146dbf74b1ac64124da61c90de8210b8bd261
SHA512

d8e3157c68efda14e545d06ed25507335f947ee10b659b3da6127699f0a396f47a4f8a52ea02cae53af461646c65f56257b0221be5d627bda4a8c0766855e6ba
SSDEEP

49152:ZS6jgWac6Gw41zPs88izTEYsTl6qSpxh4HjBRZF0hX0W9E3CZhhXQ:ZST/Ww0Loihwl6xLSHZO7EyHVQ

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a19dde64bb60c400cfacf553626ea440_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  a19dde64bb60c400cfacf553626ea440
- SHA1
  
  c1b7018c3aaf320e6ef0d7cbed0d095b572daaab
- SHA256
  
  c509fce16b119d58d80aa2d51ee146dbf74b1ac64124da61c90de8210b8bd261
- SHA512
  
  d8e3157c68efda14e545d06ed25507335f947ee10b659b3da6127699f0a396f47a4f8a52ea02cae53af461646c65f56257b0221be5d627bda4a8c0766855e6ba
- SSDEEP
  
  49152:ZS6jgWac6Gw41zPs88izTEYsTl6qSpxh4HjBRZF0hX0W9E3CZhhXQ:ZST/Ww0Loihwl6xLSHZO7EyHVQ
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence