11c5590b885f62c6aef41c6004b4a026bcad63c56915d253ef350465f8459036 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2ec304b37f3d480548553e3132e9ebe_JaffaCakes118
Size

181KB
Sample

240817-rw21vszhpa
MD5

a2ec304b37f3d480548553e3132e9ebe
SHA1

ff63ae43dba5b3852d298037b5d303095c69dabb
SHA256

11c5590b885f62c6aef41c6004b4a026bcad63c56915d253ef350465f8459036
SHA512

613d1930e7f553bcff22f08a90366e18f15b381d3b9c707c2a1b6e2b1a322eec20eba6c566d64b8ed8f6df33488ff6823ab29b4c7f4ffcf5112eb573be4ad58a
SSDEEP

3072:5S7VJh6eDfJpsZGuRM4Lk7bBn1uF0SdOmsjXsIina/cFdsa+zfinlp:Wv6+hMGsMwk1188BloFKbTy

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a2ec304b37f3d480548553e3132e9ebe_JaffaCakes118
- Size
  
  181KB
- MD5
  
  a2ec304b37f3d480548553e3132e9ebe
- SHA1
  
  ff63ae43dba5b3852d298037b5d303095c69dabb
- SHA256
  
  11c5590b885f62c6aef41c6004b4a026bcad63c56915d253ef350465f8459036
- SHA512
  
  613d1930e7f553bcff22f08a90366e18f15b381d3b9c707c2a1b6e2b1a322eec20eba6c566d64b8ed8f6df33488ff6823ab29b4c7f4ffcf5112eb573be4ad58a
- SSDEEP
  
  3072:5S7VJh6eDfJpsZGuRM4Lk7bBn1uF0SdOmsjXsIina/cFdsa+zfinlp:Wv6+hMGsMwk1188BloFKbTy
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence