58cd024e9c2c9498b70c33241baff96bdaeb4bc89aea2410b7f525ab6e024c9b | Triage

Sharing

General

Target

a733fad6eae19e2f3712162ae24790e7_JaffaCakes118
Size

8KB
Sample

240818-syv6rszglc
MD5

a733fad6eae19e2f3712162ae24790e7
SHA1

897a12a1469b463a099ae1947749912da969afe7
SHA256

58cd024e9c2c9498b70c33241baff96bdaeb4bc89aea2410b7f525ab6e024c9b
SHA512

3c20c569aea5c12e9c22152300dbd43ef2e14988ff3258bd48463e1bceed6c63f759f51c2fc30681bb7f9696beb81bf9a030b0c9b69848f9340d59559a0eb396
SSDEEP

192:lRywlEku9/+pMskjOwrfC1OWGpUG66NRxmEdS9Gd4C:lRdlEpPOufL5gkVdSQdn

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  a733fad6eae19e2f3712162ae24790e7_JaffaCakes118
- Size
  
  8KB
- MD5
  
  a733fad6eae19e2f3712162ae24790e7
- SHA1
  
  897a12a1469b463a099ae1947749912da969afe7
- SHA256
  
  58cd024e9c2c9498b70c33241baff96bdaeb4bc89aea2410b7f525ab6e024c9b
- SHA512
  
  3c20c569aea5c12e9c22152300dbd43ef2e14988ff3258bd48463e1bceed6c63f759f51c2fc30681bb7f9696beb81bf9a030b0c9b69848f9340d59559a0eb396
- SSDEEP
  
  192:lRywlEku9/+pMskjOwrfC1OWGpUG66NRxmEdS9Gd4C:lRdlEpPOufL5gkVdSQdn
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence