1015c94bff41eca43533685f0ddc0661e4befcc621519a8a9b2a6f361432fe07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118
Size

108KB
Sample

240820-tm4t7s1ere
MD5

afe92c16e7dc0958cfa2fadb6c67be0c
SHA1

a5e70d0fe24187b76bfb675ba8ad658565fc0f5b
SHA256

1015c94bff41eca43533685f0ddc0661e4befcc621519a8a9b2a6f361432fe07
SHA512

442b0fd80ee59b4e52dc041a579411db704a85d4577c174369d6504a1105eacab9f0030156816eda641b46b8121e43c8d33269cba45a6f921504af685cb2caf6
SSDEEP

3072:YPhSgzBZhqVdJW0eWa2J6XS1ONlXxNRlJB1pzAFYCF5:Y5SndVOXSwNlXxNXPCF

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  afe92c16e7dc0958cfa2fadb6c67be0c_JaffaCakes118
- Size
  
  108KB
- MD5
  
  afe92c16e7dc0958cfa2fadb6c67be0c
- SHA1
  
  a5e70d0fe24187b76bfb675ba8ad658565fc0f5b
- SHA256
  
  1015c94bff41eca43533685f0ddc0661e4befcc621519a8a9b2a6f361432fe07
- SHA512
  
  442b0fd80ee59b4e52dc041a579411db704a85d4577c174369d6504a1105eacab9f0030156816eda641b46b8121e43c8d33269cba45a6f921504af685cb2caf6
- SSDEEP
  
  3072:YPhSgzBZhqVdJW0eWa2J6XS1ONlXxNRlJB1pzAFYCF5:Y5SndVOXSwNlXxNXPCF
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence