d42c2e13463fe16c61ebc3d0f88fba77d33682af3c127d1f13110bd6d77c73c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b573f91eb080432559921e15a57fce11_JaffaCakes118
Size

261KB
Sample

240821-3cgrcszekq
MD5

b573f91eb080432559921e15a57fce11
SHA1

243dfa09e2f787710f249ac259e9c139eba8e5dc
SHA256

d42c2e13463fe16c61ebc3d0f88fba77d33682af3c127d1f13110bd6d77c73c3
SHA512

1d08844012ea49b0478d3494a15b57b36d3c5ee99db83bfc1b99f433b0b4a2bd2264e3b81b052d09994ffdac0502ae146a6fa16f2d92091ecfcd39d398ceb8e9
SSDEEP

3072:3WMoTLbAyxLnX2aKidNy/MQKI3adATsHSRh+gnTchZNQsnOGT0RJiyDyCjntuFjy:YdGkHKdRhTIG3hDyCj8FyDxd

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b573f91eb080432559921e15a57fce11_JaffaCakes118
- Size
  
  261KB
- MD5
  
  b573f91eb080432559921e15a57fce11
- SHA1
  
  243dfa09e2f787710f249ac259e9c139eba8e5dc
- SHA256
  
  d42c2e13463fe16c61ebc3d0f88fba77d33682af3c127d1f13110bd6d77c73c3
- SHA512
  
  1d08844012ea49b0478d3494a15b57b36d3c5ee99db83bfc1b99f433b0b4a2bd2264e3b81b052d09994ffdac0502ae146a6fa16f2d92091ecfcd39d398ceb8e9
- SSDEEP
  
  3072:3WMoTLbAyxLnX2aKidNy/MQKI3adATsHSRh+gnTchZNQsnOGT0RJiyDyCjntuFjy:YdGkHKdRhTIG3hDyCj8FyDxd
Score

6^/10

persistence discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence