95165cbb400d4b32f920d655a0828c68626be9830ee680059f2f1c01a4887608 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a85a052f4ffdcee0c32f75996964c264_JaffaCakes118
Size

4.5MB
Sample

240818-1pschszbnm
MD5

a85a052f4ffdcee0c32f75996964c264
SHA1

81abec86cf4eb5ca6b3c827328cbbd20ae7ec180
SHA256

95165cbb400d4b32f920d655a0828c68626be9830ee680059f2f1c01a4887608
SHA512

d59077b93d7f131e570b021fe569e7ae4a69d463b2b33705fc218ec5415385fc9f06d46c4f916abceae890295e2810e1e006e7643aa938f5c604099248c0a3c5
SSDEEP

768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/49:tjrAX5NjJHJ+oFE2M/49

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a85a052f4ffdcee0c32f75996964c264_JaffaCakes118
- Size
  
  4.5MB
- MD5
  
  a85a052f4ffdcee0c32f75996964c264
- SHA1
  
  81abec86cf4eb5ca6b3c827328cbbd20ae7ec180
- SHA256
  
  95165cbb400d4b32f920d655a0828c68626be9830ee680059f2f1c01a4887608
- SHA512
  
  d59077b93d7f131e570b021fe569e7ae4a69d463b2b33705fc218ec5415385fc9f06d46c4f916abceae890295e2810e1e006e7643aa938f5c604099248c0a3c5
- SSDEEP
  
  768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/49:tjrAX5NjJHJ+oFE2M/49
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence