04ea7a57c741695131c4c5fd16d607a64a7ec034bcb7b557b84eb2ee56102c71 | Triage

Sharing

General

Target

a6925f4e17b512fb7a7b8b0e0cec5293_JaffaCakes118
Size

252KB
Sample

240818-ndqnbstgrj
MD5

a6925f4e17b512fb7a7b8b0e0cec5293
SHA1

c03aa8b6e756e82eb039b8cd05e90b9a867dd023
SHA256

04ea7a57c741695131c4c5fd16d607a64a7ec034bcb7b557b84eb2ee56102c71
SHA512

bba5f7cfe55ae6564ab1be2a828b6ef43d4a2f6a6047b11c186e9b561e43d7e84e2aacf0bb830283e6d45d90cea1620a7ce1285b1b3d2373fbc413d47da8e3da
SSDEEP

3072:H2nc8Ofx1MbxTaamX4uCanKGGlk6N8EKxDDFHDH+kwoA6YbwWWuVZwmfbGly4jtT:igJwoBi3XbGly4j83Hzm

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6925f4e17b512fb7a7b8b0e0cec5293_JaffaCakes118
- Size
  
  252KB
- MD5
  
  a6925f4e17b512fb7a7b8b0e0cec5293
- SHA1
  
  c03aa8b6e756e82eb039b8cd05e90b9a867dd023
- SHA256
  
  04ea7a57c741695131c4c5fd16d607a64a7ec034bcb7b557b84eb2ee56102c71
- SHA512
  
  bba5f7cfe55ae6564ab1be2a828b6ef43d4a2f6a6047b11c186e9b561e43d7e84e2aacf0bb830283e6d45d90cea1620a7ce1285b1b3d2373fbc413d47da8e3da
- SSDEEP
  
  3072:H2nc8Ofx1MbxTaamX4uCanKGGlk6N8EKxDDFHDH+kwoA6YbwWWuVZwmfbGly4jtT:igJwoBi3XbGly4j83Hzm
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence