c8d1189fe9e8530aa25adfa2fc9a8d8cbd028d8021ffc587218eefab26561b84 | Triage

Sharing

General

Target

a29278b5e25a1beee196dcebb9f6d396_JaffaCakes118
Size

72KB
Sample

240817-pw3laawclg
MD5

a29278b5e25a1beee196dcebb9f6d396
SHA1

1c97d29fa9eb978ea87134d6003b17ca493c10b6
SHA256

c8d1189fe9e8530aa25adfa2fc9a8d8cbd028d8021ffc587218eefab26561b84
SHA512

a5623ae74794ae38bca5e3e08e51afce2edc3065c2f1bb2ce5aba5f05192dabd8c957f124ef071bbd189033fa1182f4282da6c62d9b944475e7bc3e49f9afae9
SSDEEP

1536:Q0Txm3pfWYldB5ilTttWU3jCpR6CeozsSgP5+c7:Q0IpuYLucOcjrzsSgP5+c7

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a29278b5e25a1beee196dcebb9f6d396_JaffaCakes118
- Size
  
  72KB
- MD5
  
  a29278b5e25a1beee196dcebb9f6d396
- SHA1
  
  1c97d29fa9eb978ea87134d6003b17ca493c10b6
- SHA256
  
  c8d1189fe9e8530aa25adfa2fc9a8d8cbd028d8021ffc587218eefab26561b84
- SHA512
  
  a5623ae74794ae38bca5e3e08e51afce2edc3065c2f1bb2ce5aba5f05192dabd8c957f124ef071bbd189033fa1182f4282da6c62d9b944475e7bc3e49f9afae9
- SSDEEP
  
  1536:Q0Txm3pfWYldB5ilTttWU3jCpR6CeozsSgP5+c7:Q0IpuYLucOcjrzsSgP5+c7
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence