e466b336018b7f255d15328ae66ec29ac4dc2e65b29235e5e88d0815c823c201 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a93be579dcb2f671d942b014da8cf7_JaffaCakes118
Size

4.2MB
Sample

240825-nqw1wascqh
MD5

c0a93be579dcb2f671d942b014da8cf7
SHA1

b0bc666039a814cf1618c3ef993c1a2ca892a62c
SHA256

e466b336018b7f255d15328ae66ec29ac4dc2e65b29235e5e88d0815c823c201
SHA512

63fd0d5f09b640402e174b40c68b605b9f0e11b9a3738d2058e0869b7e09575df14a8689414bd22fb7835eac120254339933a696e49281bbbd43ea620c0b187d
SSDEEP

768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4V:tjrAX5NjJHJ+oFE2M/4V

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  c0a93be579dcb2f671d942b014da8cf7_JaffaCakes118
- Size
  
  4.2MB
- MD5
  
  c0a93be579dcb2f671d942b014da8cf7
- SHA1
  
  b0bc666039a814cf1618c3ef993c1a2ca892a62c
- SHA256
  
  e466b336018b7f255d15328ae66ec29ac4dc2e65b29235e5e88d0815c823c201
- SHA512
  
  63fd0d5f09b640402e174b40c68b605b9f0e11b9a3738d2058e0869b7e09575df14a8689414bd22fb7835eac120254339933a696e49281bbbd43ea620c0b187d
- SSDEEP
  
  768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4V:tjrAX5NjJHJ+oFE2M/4V
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence