2eff1e6298e75d3a11bdfa4f291488939f3741d53a64b296ef93d1f77f09324f | Triage

Sharing

General

Target

bde266626a33f2cb89b1a7c596482b8b_JaffaCakes118
Size

425KB
Sample

240824-ez9tnashje
MD5

bde266626a33f2cb89b1a7c596482b8b
SHA1

f2f24815a10a87cf75c75ff6c94e8625390469e2
SHA256

2eff1e6298e75d3a11bdfa4f291488939f3741d53a64b296ef93d1f77f09324f
SHA512

7c33b07e6f751a3b5aa729816fc95eaae98362c9a677c71cf6ea275220ff920d97f42c5c4f24816509696ac5fc4ad5b7eb6f4d95155865587efff92a4f8432d4
SSDEEP

6144:EawmM96qA3alE+HDEnCqqw4PBVsFPl8wkGABJdTTGboMIdB3YBhFvSnRfdtOtplc:j+6qXK+wCqqw4gF69GpIeanR3CpAW

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  bde266626a33f2cb89b1a7c596482b8b_JaffaCakes118
- Size
  
  425KB
- MD5
  
  bde266626a33f2cb89b1a7c596482b8b
- SHA1
  
  f2f24815a10a87cf75c75ff6c94e8625390469e2
- SHA256
  
  2eff1e6298e75d3a11bdfa4f291488939f3741d53a64b296ef93d1f77f09324f
- SHA512
  
  7c33b07e6f751a3b5aa729816fc95eaae98362c9a677c71cf6ea275220ff920d97f42c5c4f24816509696ac5fc4ad5b7eb6f4d95155865587efff92a4f8432d4
- SSDEEP
  
  6144:EawmM96qA3alE+HDEnCqqw4PBVsFPl8wkGABJdTTGboMIdB3YBhFvSnRfdtOtplc:j+6qXK+wCqqw4gF69GpIeanR3CpAW
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence