3ab3fa26651eebc56b53c8d9d496035581d78ea92d5c78e1eecda49a2b3321cd | Triage

Sharing

General

Target

a20c0b43b6451ab78abacdd32ed39187_JaffaCakes118
Size

4.9MB
Sample

240817-lnsjkasclk
MD5

a20c0b43b6451ab78abacdd32ed39187
SHA1

c832421d292d46931ac58923178ca79a5eb3d183
SHA256

3ab3fa26651eebc56b53c8d9d496035581d78ea92d5c78e1eecda49a2b3321cd
SHA512

df39049d3a3b8e28249d3a12c47a237161425414769347820ee7840f48b085665db3ac3b2ee79a25aa0e106f7b1d78bb16426b3b2679211c7a5586a6312dbe15
SSDEEP

768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4F:tjrAX5NjJHJ+oFE2M/4F

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a20c0b43b6451ab78abacdd32ed39187_JaffaCakes118
- Size
  
  4.9MB
- MD5
  
  a20c0b43b6451ab78abacdd32ed39187
- SHA1
  
  c832421d292d46931ac58923178ca79a5eb3d183
- SHA256
  
  3ab3fa26651eebc56b53c8d9d496035581d78ea92d5c78e1eecda49a2b3321cd
- SHA512
  
  df39049d3a3b8e28249d3a12c47a237161425414769347820ee7840f48b085665db3ac3b2ee79a25aa0e106f7b1d78bb16426b3b2679211c7a5586a6312dbe15
- SSDEEP
  
  768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4F:tjrAX5NjJHJ+oFE2M/4F
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence