64aa2c3ea4bc7b1dc0cb17ab991c8c988a5505fb68d1ef6448f01209ad22a60d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b503c1043a8a3987ff6f25488153d3aa_JaffaCakes118
Size

659KB
Sample

240821-zq94aatfnp
MD5

b503c1043a8a3987ff6f25488153d3aa
SHA1

6b02f073f5a15e8a4acd58932f2355deff4b4338
SHA256

64aa2c3ea4bc7b1dc0cb17ab991c8c988a5505fb68d1ef6448f01209ad22a60d
SHA512

fee5a2a8db0d91cf5f4cad8f48b7e6fb2d024659658438b2ee2fbd649e84f875fc08a78c3ac1b0701a3c780d3b07502d71daffabd2ce8ecc078706fc1e8cd5a1
SSDEEP

12288:ovKJXXEl0TfMYD/jmb92aKVsDT/EmuhWmQUdSwbBF7aqX:oCLDM6/jmb98VATzAWmQUdBXbX

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b503c1043a8a3987ff6f25488153d3aa_JaffaCakes118
- Size
  
  659KB
- MD5
  
  b503c1043a8a3987ff6f25488153d3aa
- SHA1
  
  6b02f073f5a15e8a4acd58932f2355deff4b4338
- SHA256
  
  64aa2c3ea4bc7b1dc0cb17ab991c8c988a5505fb68d1ef6448f01209ad22a60d
- SHA512
  
  fee5a2a8db0d91cf5f4cad8f48b7e6fb2d024659658438b2ee2fbd649e84f875fc08a78c3ac1b0701a3c780d3b07502d71daffabd2ce8ecc078706fc1e8cd5a1
- SSDEEP
  
  12288:ovKJXXEl0TfMYD/jmb92aKVsDT/EmuhWmQUdSwbBF7aqX:oCLDM6/jmb98VATzAWmQUdBXbX
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence