548e24869b249508cfb640c038f3816174fd14002c112f5b9a9f412c7e4da0a3 | Triage

Sharing

General

Target

d10c97f6a6a7f1234b1c52342602e1e1_JaffaCakes118
Size

5.1MB
Sample

240907-ess8bsthlr
MD5

d10c97f6a6a7f1234b1c52342602e1e1
SHA1

5e7d5e00c89101af72e73375ee3b43332375a0c4
SHA256

548e24869b249508cfb640c038f3816174fd14002c112f5b9a9f412c7e4da0a3
SHA512

85f484789d797047f4f99f0620fa877ac8767f86a6558c4b7069e5250c62151489f3cbf95347ab9f031aa57e6f9398949ff008f756a7157a1707de4515679876
SSDEEP

24576:j2rj6pSB1dpbFzrdGkNUyYNVqy9N6LlLVn6VMo+1/KwxLRxIQx/txB54HGJ/:yPfjrd+rhGLVn4MtvRn/tHGHy/

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d10c97f6a6a7f1234b1c52342602e1e1_JaffaCakes118
- Size
  
  5.1MB
- MD5
  
  d10c97f6a6a7f1234b1c52342602e1e1
- SHA1
  
  5e7d5e00c89101af72e73375ee3b43332375a0c4
- SHA256
  
  548e24869b249508cfb640c038f3816174fd14002c112f5b9a9f412c7e4da0a3
- SHA512
  
  85f484789d797047f4f99f0620fa877ac8767f86a6558c4b7069e5250c62151489f3cbf95347ab9f031aa57e6f9398949ff008f756a7157a1707de4515679876
- SSDEEP
  
  24576:j2rj6pSB1dpbFzrdGkNUyYNVqy9N6LlLVn6VMo+1/KwxLRxIQx/txB54HGJ/:yPfjrd+rhGLVn4MtvRn/tHGHy/
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence