9e3b831205c7c257862474be8f9bfcea9a81f74f5f3cac0fcd925a2cb998580d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d03c6ed48fb6f70ef0d7f981dfb52d34_JaffaCakes118
Size

388KB
Sample

240906-xhg2essgpg
MD5

d03c6ed48fb6f70ef0d7f981dfb52d34
SHA1

0a7d8a95bc88f88d698f2f5c8c4de60721b71ce3
SHA256

9e3b831205c7c257862474be8f9bfcea9a81f74f5f3cac0fcd925a2cb998580d
SHA512

280c2565ff32b1474e347e6c6476e09629b05585ade01d76ecaa7bd8bcf592ddabf94848d5a94d4a8595014bb9bc749fe2b522b01b0ae4f13dc9698643c77788
SSDEEP

12288:ucep+Vd6Wl/uAcim34Zgzlh6mhniOjJ7cwd+:ucs+mO+im3CLmhn3dW

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d03c6ed48fb6f70ef0d7f981dfb52d34_JaffaCakes118
- Size
  
  388KB
- MD5
  
  d03c6ed48fb6f70ef0d7f981dfb52d34
- SHA1
  
  0a7d8a95bc88f88d698f2f5c8c4de60721b71ce3
- SHA256
  
  9e3b831205c7c257862474be8f9bfcea9a81f74f5f3cac0fcd925a2cb998580d
- SHA512
  
  280c2565ff32b1474e347e6c6476e09629b05585ade01d76ecaa7bd8bcf592ddabf94848d5a94d4a8595014bb9bc749fe2b522b01b0ae4f13dc9698643c77788
- SSDEEP
  
  12288:ucep+Vd6Wl/uAcim34Zgzlh6mhniOjJ7cwd+:ucs+mO+im3CLmhn3dW
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence