92272754294f3bdf35955c2007de5b7ea79a9500340dd920ba69335149c54c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1ea74eaa518d6840ae93734f9b53e88_JaffaCakes118
Size

143KB
Sample

240821-dt53va1erk
MD5

b1ea74eaa518d6840ae93734f9b53e88
SHA1

ddd3e47a7dc64ba2bfdaf9952216e3814f6c2693
SHA256

92272754294f3bdf35955c2007de5b7ea79a9500340dd920ba69335149c54c20
SHA512

e01100e1ba6a676ad8a65c57e33e16c4fc252327dc610f894d580036e7b1f63678b25f2c5cabaa246ddb34d25d254ebb5d90cdf4475e267f4d7e5267226b985f
SSDEEP

3072:PcDKbs7WQCpDhqCIDZYD+FJ4YPIS8A4oTgPlE15jxdiH:Pcmb8ShQZo+FJCSP4oTgPwdu

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1ea74eaa518d6840ae93734f9b53e88_JaffaCakes118
- Size
  
  143KB
- MD5
  
  b1ea74eaa518d6840ae93734f9b53e88
- SHA1
  
  ddd3e47a7dc64ba2bfdaf9952216e3814f6c2693
- SHA256
  
  92272754294f3bdf35955c2007de5b7ea79a9500340dd920ba69335149c54c20
- SHA512
  
  e01100e1ba6a676ad8a65c57e33e16c4fc252327dc610f894d580036e7b1f63678b25f2c5cabaa246ddb34d25d254ebb5d90cdf4475e267f4d7e5267226b985f
- SSDEEP
  
  3072:PcDKbs7WQCpDhqCIDZYD+FJ4YPIS8A4oTgPlE15jxdiH:Pcmb8ShQZo+FJCSP4oTgPwdu
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence