18d28924ebb9b0b04a4bac9773deda37a36aec71b8a68f63d7295b05b41b83e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af6a6104b6c48a777def0882e7e41082_JaffaCakes118
Size

389KB
Sample

240820-qse69athqb
MD5

af6a6104b6c48a777def0882e7e41082
SHA1

77ce0a22e77555bf6978754c560c31c82259dfc7
SHA256

18d28924ebb9b0b04a4bac9773deda37a36aec71b8a68f63d7295b05b41b83e3
SHA512

a01ede007c5a20d868c195da44d6ab607df2dd1309e12276a765774e598a73862597220da31d45ed452370ed84ff7e35ca1bd22e737e46beee92d566db0bb535
SSDEEP

12288:uoWkBeoBPF6Kl/uAcihIujnzfgbjQUN94GA:uopBeoSC+ihIgrMQUN94GA

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  af6a6104b6c48a777def0882e7e41082_JaffaCakes118
- Size
  
  389KB
- MD5
  
  af6a6104b6c48a777def0882e7e41082
- SHA1
  
  77ce0a22e77555bf6978754c560c31c82259dfc7
- SHA256
  
  18d28924ebb9b0b04a4bac9773deda37a36aec71b8a68f63d7295b05b41b83e3
- SHA512
  
  a01ede007c5a20d868c195da44d6ab607df2dd1309e12276a765774e598a73862597220da31d45ed452370ed84ff7e35ca1bd22e737e46beee92d566db0bb535
- SSDEEP
  
  12288:uoWkBeoBPF6Kl/uAcihIujnzfgbjQUN94GA:uopBeoSC+ihIgrMQUN94GA
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence