e85f2cf52626c5f6ad36bb1011ca8ddecc0f9c05d4b9c81180684901e391e478 | Triage

Sharing

General

Target

c20c21b46a259fa8cc3644ffd00707a9_JaffaCakes118
Size

36KB
Sample

240826-b952nszekn
MD5

c20c21b46a259fa8cc3644ffd00707a9
SHA1

e257d5117d434207386f90fc0cbb3eb1c017b9b1
SHA256

e85f2cf52626c5f6ad36bb1011ca8ddecc0f9c05d4b9c81180684901e391e478
SHA512

291c9c7fe0a9b164e623213bc8d0926aaa64e2738f6e139a4286fa67992bc6c0c9aca7310b9c0e19e9c23869507cf593bb2ecace494d74edf4435b37a8ab5c1f
SSDEEP

384:db41lMNvIZe4A100WrkMxPUD/NfDhM1bERvSG765Gdu1zI3JDAsuEcHZFlT6tMNN:dZeZsCB8Dy166GW5nz8AsuEcHZF9dD

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  c20c21b46a259fa8cc3644ffd00707a9_JaffaCakes118
- Size
  
  36KB
- MD5
  
  c20c21b46a259fa8cc3644ffd00707a9
- SHA1
  
  e257d5117d434207386f90fc0cbb3eb1c017b9b1
- SHA256
  
  e85f2cf52626c5f6ad36bb1011ca8ddecc0f9c05d4b9c81180684901e391e478
- SHA512
  
  291c9c7fe0a9b164e623213bc8d0926aaa64e2738f6e139a4286fa67992bc6c0c9aca7310b9c0e19e9c23869507cf593bb2ecace494d74edf4435b37a8ab5c1f
- SSDEEP
  
  384:db41lMNvIZe4A100WrkMxPUD/NfDhM1bERvSG765Gdu1zI3JDAsuEcHZFlT6tMNN:dZeZsCB8Dy166GW5nz8AsuEcHZF9dD
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence