38b3589547e2d7920eaaf36e0306727e6eeeebe47984e1f30011b2c389b227bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5d8f4a683851cf4011fd0a17c816ab1_JaffaCakes118
Size

487KB
Sample

240818-hze6tsvdrp
MD5

a5d8f4a683851cf4011fd0a17c816ab1
SHA1

a3d7543e3e4555aaf57454bf4ce959e53d7a0b95
SHA256

38b3589547e2d7920eaaf36e0306727e6eeeebe47984e1f30011b2c389b227bd
SHA512

0579cb08aa0c4d3415b01e312419c068b49d930dd5649a03e7f9363b7932fae5d7f17c53dd7fb64f41b495c6df5872a4356274b20f873a6b89fa5d889fec0f42
SSDEEP

6144:AbriybxvIRilmvgqm9+eGzwgEw6QOvfwJg4feucj1J7OeMBdVFvfncl0zhZzcilL:QxvI86DeG0gl/2R1UhdVFnn9zhZzZbJ

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a5d8f4a683851cf4011fd0a17c816ab1_JaffaCakes118
- Size
  
  487KB
- MD5
  
  a5d8f4a683851cf4011fd0a17c816ab1
- SHA1
  
  a3d7543e3e4555aaf57454bf4ce959e53d7a0b95
- SHA256
  
  38b3589547e2d7920eaaf36e0306727e6eeeebe47984e1f30011b2c389b227bd
- SHA512
  
  0579cb08aa0c4d3415b01e312419c068b49d930dd5649a03e7f9363b7932fae5d7f17c53dd7fb64f41b495c6df5872a4356274b20f873a6b89fa5d889fec0f42
- SSDEEP
  
  6144:AbriybxvIRilmvgqm9+eGzwgEw6QOvfwJg4feucj1J7OeMBdVFvfncl0zhZzcilL:QxvI86DeG0gl/2R1UhdVFnn9zhZzZbJ
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence