1de55b7f48d4e0e14dd3b079837a413bcb8de693750f4c1c1dc3937dd77689d4 | Triage

Sharing

General

Target

c89a17d02cb96b457c302ad34e41609b_JaffaCakes118
Size

390KB
Sample

240829-ly5a4sxeqr
MD5

c89a17d02cb96b457c302ad34e41609b
SHA1

3651bec58cf2a73f61ab23a9a0eee9332fdf988d
SHA256

1de55b7f48d4e0e14dd3b079837a413bcb8de693750f4c1c1dc3937dd77689d4
SHA512

580191263cbf2745450c75836ad64666ba5af098ef770e62fa5f66ba8e977383433b773af94ae4c8bc59a3431ffbff05da49ff07dab88fd0144c644573c0db33
SSDEEP

6144:4xtap1VCROEAK5tQRVCCRuqygi5JQ/AbVFb/vmmBSs3nleOgygMocl:+tap1UROEAKXa0BJQOHws3nTboS

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c89a17d02cb96b457c302ad34e41609b_JaffaCakes118
- Size
  
  390KB
- MD5
  
  c89a17d02cb96b457c302ad34e41609b
- SHA1
  
  3651bec58cf2a73f61ab23a9a0eee9332fdf988d
- SHA256
  
  1de55b7f48d4e0e14dd3b079837a413bcb8de693750f4c1c1dc3937dd77689d4
- SHA512
  
  580191263cbf2745450c75836ad64666ba5af098ef770e62fa5f66ba8e977383433b773af94ae4c8bc59a3431ffbff05da49ff07dab88fd0144c644573c0db33
- SSDEEP
  
  6144:4xtap1VCROEAK5tQRVCCRuqygi5JQ/AbVFb/vmmBSs3nleOgygMocl:+tap1UROEAKXa0BJQOHws3nTboS
Score

8^/10

discovery persistence
- Sets service image path in registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence