39df7a3166db10407a9fa2142aedb2fbb624b613858cafe5ef7a29c4f7b61d69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c6fd76b60415438cb5f52692357862_JaffaCakes118
Size

286KB
Sample

240822-xqs4nasfrc
MD5

b8c6fd76b60415438cb5f52692357862
SHA1

5c32b77d0ac7d55d30494b93517aba201b05b3e2
SHA256

39df7a3166db10407a9fa2142aedb2fbb624b613858cafe5ef7a29c4f7b61d69
SHA512

a2d79f9b57d170b3b9e64bbf87f9c9e67c0ec55227778af4de86af448357ce396ad708cec94dee04ca3f4500c84a93c8afe148c72c5735bbe0e6fb8290d0252b
SSDEEP

6144:8SjzY2oDV8pfFrWyJMG+WvoavmYMhPHSjdf2yzhLGBUGlYI4P1vzKNP:85/DVaBXJMG+B+mYKPHGzhLtgYIAC

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b8c6fd76b60415438cb5f52692357862_JaffaCakes118
- Size
  
  286KB
- MD5
  
  b8c6fd76b60415438cb5f52692357862
- SHA1
  
  5c32b77d0ac7d55d30494b93517aba201b05b3e2
- SHA256
  
  39df7a3166db10407a9fa2142aedb2fbb624b613858cafe5ef7a29c4f7b61d69
- SHA512
  
  a2d79f9b57d170b3b9e64bbf87f9c9e67c0ec55227778af4de86af448357ce396ad708cec94dee04ca3f4500c84a93c8afe148c72c5735bbe0e6fb8290d0252b
- SSDEEP
  
  6144:8SjzY2oDV8pfFrWyJMG+WvoavmYMhPHSjdf2yzhLGBUGlYI4P1vzKNP:85/DVaBXJMG+B+mYKPHGzhLtgYIAC
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2