489692cc3d26f38c186d7fa242b11a293e72f18a625eb0b5d1a16c55744f2bfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8579e43f87839ec90e1fbd104e53e4b_JaffaCakes118
Size

389KB
Sample

240829-gv4g7ayhjq
MD5

c8579e43f87839ec90e1fbd104e53e4b
SHA1

3f5a8d06f5916a4ce78ba563839b5195535470b4
SHA256

489692cc3d26f38c186d7fa242b11a293e72f18a625eb0b5d1a16c55744f2bfb
SHA512

4c44114b8025e73479aa29844ea1dedfe06f2e81b6b1ce9b8a1612358df1e473ce67cfc67f3474fed74abf5bad40b3b7926ab4369cb8f764b2e5132dd374370e
SSDEEP

6144:u9llQSwfl6fAtyFAwnmLxbzleeee55XU+e33ERDM5xip279oPUDKF9Y6qYs03yA6:ueSit0rUfv5XUF3edY9oj9Y6VsnA6

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  c8579e43f87839ec90e1fbd104e53e4b_JaffaCakes118
- Size
  
  389KB
- MD5
  
  c8579e43f87839ec90e1fbd104e53e4b
- SHA1
  
  3f5a8d06f5916a4ce78ba563839b5195535470b4
- SHA256
  
  489692cc3d26f38c186d7fa242b11a293e72f18a625eb0b5d1a16c55744f2bfb
- SHA512
  
  4c44114b8025e73479aa29844ea1dedfe06f2e81b6b1ce9b8a1612358df1e473ce67cfc67f3474fed74abf5bad40b3b7926ab4369cb8f764b2e5132dd374370e
- SSDEEP
  
  6144:u9llQSwfl6fAtyFAwnmLxbzleeee55XU+e33ERDM5xip279oPUDKF9Y6qYs03yA6:ueSit0rUfv5XUF3edY9oj9Y6VsnA6
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence