d5ee88455d2ac5a405cb72d9eb67d1277183a426df9deed2ec61041fed073f0c | Triage

Sharing

General

Target

cff59fe65aa43950c03660ede1fc8a7b_JaffaCakes118
Size

317KB
Sample

240906-txan4swhqf
MD5

cff59fe65aa43950c03660ede1fc8a7b
SHA1

dcd782b6f13dcfcc0f581687a53f06d66ca4e70f
SHA256

d5ee88455d2ac5a405cb72d9eb67d1277183a426df9deed2ec61041fed073f0c
SHA512

e474a894a4c6ded4d44c7fc8ee040f562b6c6a710c9d10321274d6b7d2241cf6bd311cea4b82687518bd047435d9a82f71d8db7d639b913b1a39b8c69583d358
SSDEEP

3072:OBwaM0k+7FB3oJJc5B2LvWiLAobJeIDUTJJdTMq9Zi4mCxxHtX9r1j3jPm61p3XT:ONoJi2LEoN2Jd4A9+t8i8V5

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  cff59fe65aa43950c03660ede1fc8a7b_JaffaCakes118
- Size
  
  317KB
- MD5
  
  cff59fe65aa43950c03660ede1fc8a7b
- SHA1
  
  dcd782b6f13dcfcc0f581687a53f06d66ca4e70f
- SHA256
  
  d5ee88455d2ac5a405cb72d9eb67d1277183a426df9deed2ec61041fed073f0c
- SHA512
  
  e474a894a4c6ded4d44c7fc8ee040f562b6c6a710c9d10321274d6b7d2241cf6bd311cea4b82687518bd047435d9a82f71d8db7d639b913b1a39b8c69583d358
- SSDEEP
  
  3072:OBwaM0k+7FB3oJJc5B2LvWiLAobJeIDUTJJdTMq9Zi4mCxxHtX9r1j3jPm61p3XT:ONoJi2LEoN2Jd4A9+t8i8V5
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence