77605ec4598a1db99f389721578994a0f5bfb71d80e6ca0a1fc09c432550ad0a | Triage

Sharing

General

Target

b59be5c461d84597b6d532ed03fa7d8d_JaffaCakes118
Size

397KB
Sample

240822-alswrsybkg
MD5

b59be5c461d84597b6d532ed03fa7d8d
SHA1

729ecea06e12728585fb155c6d87901f540975c4
SHA256

77605ec4598a1db99f389721578994a0f5bfb71d80e6ca0a1fc09c432550ad0a
SHA512

54ecf561d287995f553258fa6bf85e2824af7d03cbd6d42412be9a58db9b7766f825cb8fbb483e616f5965ac66c20d5baaa40a749fbe3ac67f516303bf47028b
SSDEEP

12288:u8xyiLX0rUfv5XUF3WIdd/IwiAZNlSOfgJ:ujiLoU5kF3Wx3aNS

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b59be5c461d84597b6d532ed03fa7d8d_JaffaCakes118
- Size
  
  397KB
- MD5
  
  b59be5c461d84597b6d532ed03fa7d8d
- SHA1
  
  729ecea06e12728585fb155c6d87901f540975c4
- SHA256
  
  77605ec4598a1db99f389721578994a0f5bfb71d80e6ca0a1fc09c432550ad0a
- SHA512
  
  54ecf561d287995f553258fa6bf85e2824af7d03cbd6d42412be9a58db9b7766f825cb8fbb483e616f5965ac66c20d5baaa40a749fbe3ac67f516303bf47028b
- SSDEEP
  
  12288:u8xyiLX0rUfv5XUF3WIdd/IwiAZNlSOfgJ:ujiLoU5kF3Wx3aNS
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence