92edc53a2daa92e7fd1205f27b4a5852f71eff2a0ebede25d43b492d0c9fb979 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05eb7f31e866a27f0cfb04949e48604_JaffaCakes118
Size

28KB
Sample

240825-kpf2gsvfrb
MD5

c05eb7f31e866a27f0cfb04949e48604
SHA1

e5e5814f16234af9876a88d70fbb2bcbc77433bb
SHA256

92edc53a2daa92e7fd1205f27b4a5852f71eff2a0ebede25d43b492d0c9fb979
SHA512

95e00ff443208f0fdb3a7efb258eae48aadf7d9f79362fde87178b7c82dd0ae7152fdd78618ddc85ec2a6d9e9b1263af7a334cf17ceccd5306dcb650c0558d03
SSDEEP

192:PPfo5LJSwrGbwkoWac5yq+YSVh6f61oynk0p2E3gmqhuWbFQJwkaD1lFQ93M3pkz:QhJSKGbw7WasSf1y0p2hMWKS7QSct

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  c05eb7f31e866a27f0cfb04949e48604_JaffaCakes118
- Size
  
  28KB
- MD5
  
  c05eb7f31e866a27f0cfb04949e48604
- SHA1
  
  e5e5814f16234af9876a88d70fbb2bcbc77433bb
- SHA256
  
  92edc53a2daa92e7fd1205f27b4a5852f71eff2a0ebede25d43b492d0c9fb979
- SHA512
  
  95e00ff443208f0fdb3a7efb258eae48aadf7d9f79362fde87178b7c82dd0ae7152fdd78618ddc85ec2a6d9e9b1263af7a334cf17ceccd5306dcb650c0558d03
- SSDEEP
  
  192:PPfo5LJSwrGbwkoWac5yq+YSVh6f61oynk0p2E3gmqhuWbFQJwkaD1lFQ93M3pkz:QhJSKGbw7WasSf1y0p2hMWKS7QSct
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence