0528cbde627abfdb17ac92a0d488f3a317f95706336b7e3183c67a8291e4411f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1e7643242726921df4fff4fa3d7a2de_JaffaCakes118
Size

26KB
Sample

240817-kq1ghsxbrg
MD5

a1e7643242726921df4fff4fa3d7a2de
SHA1

f73bdfc5b319f2dd3c31be6052c6e68b8bb8a0be
SHA256

0528cbde627abfdb17ac92a0d488f3a317f95706336b7e3183c67a8291e4411f
SHA512

deb769d8a69d643b779476f7ae4d686d1801c42ea82a8c483cb8db66218cb63e0c4f3d2faebfebe760f9a30dd6f48cab0ef870b1fb7d2afe3d2add46b6865831
SSDEEP

384:0QYZ5rVJD9mwItrOo4c8B4PPjVaAl/VgSYMlTTgjA4SlV4ZwWW+3no7:aBvDpIUoeEvVCtMlQA4SlVawj+3o

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a1e7643242726921df4fff4fa3d7a2de_JaffaCakes118
- Size
  
  26KB
- MD5
  
  a1e7643242726921df4fff4fa3d7a2de
- SHA1
  
  f73bdfc5b319f2dd3c31be6052c6e68b8bb8a0be
- SHA256
  
  0528cbde627abfdb17ac92a0d488f3a317f95706336b7e3183c67a8291e4411f
- SHA512
  
  deb769d8a69d643b779476f7ae4d686d1801c42ea82a8c483cb8db66218cb63e0c4f3d2faebfebe760f9a30dd6f48cab0ef870b1fb7d2afe3d2add46b6865831
- SSDEEP
  
  384:0QYZ5rVJD9mwItrOo4c8B4PPjVaAl/VgSYMlTTgjA4SlV4ZwWW+3no7:aBvDpIUoeEvVCtMlQA4SlVawj+3o
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence