99e6ab8ef5578dff8cb7f02220c8ce618b6aae682b658cc6a4beeb2f4f8ea9b5 | Triage

Sharing

General

Target

b538950f31226e85e47644980e019d1f_JaffaCakes118
Size

56KB
Sample

240821-1za6zstakc
MD5

b538950f31226e85e47644980e019d1f
SHA1

25d0b4ba28ec2f17734bfb79124f85de62b669b6
SHA256

99e6ab8ef5578dff8cb7f02220c8ce618b6aae682b658cc6a4beeb2f4f8ea9b5
SHA512

1f81662e4199d9656f30638300d917a635286861f01dea3d5080213a26b8a064be6171d77011e5a705f5cef92f334b21932b56a7955e6f39b7e6321aedb62aa7
SSDEEP

1536:R7IfxbIxMQ29cpR7GeI55fioSn6i5ZpuNu:RN+ioS6iluo

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b538950f31226e85e47644980e019d1f_JaffaCakes118
- Size
  
  56KB
- MD5
  
  b538950f31226e85e47644980e019d1f
- SHA1
  
  25d0b4ba28ec2f17734bfb79124f85de62b669b6
- SHA256
  
  99e6ab8ef5578dff8cb7f02220c8ce618b6aae682b658cc6a4beeb2f4f8ea9b5
- SHA512
  
  1f81662e4199d9656f30638300d917a635286861f01dea3d5080213a26b8a064be6171d77011e5a705f5cef92f334b21932b56a7955e6f39b7e6321aedb62aa7
- SSDEEP
  
  1536:R7IfxbIxMQ29cpR7GeI55fioSn6i5ZpuNu:RN+ioS6iluo
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence