9c62ca955548db017ec18d6bfd2e4a0cbf38721ad34aeb36fd985726e07dae91 | Triage

Sharing

General

Target

d50edbafe5ecdfe52f15b8b5d6858b9f_JaffaCakes118
Size

550KB
Sample

240908-zcvfnswgjc
MD5

d50edbafe5ecdfe52f15b8b5d6858b9f
SHA1

c3f5d3fcac4bda16a163f21a3789b1e9083ff71b
SHA256

9c62ca955548db017ec18d6bfd2e4a0cbf38721ad34aeb36fd985726e07dae91
SHA512

7c410554e7f062c07e3d78b794acb9b0c632683af420de73d10cc6fb3aad583591197a25e410c93eaffdeb6359d3fcb73f0a077cc736ea8deaa76b52b8f4347c
SSDEEP

12288:kcbPKFOuHx+wb3PpB0x+8dVNVmIWZyuwT7KmTD:tKFrx+wbRB38dVNVmTsuwT7K

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d50edbafe5ecdfe52f15b8b5d6858b9f_JaffaCakes118
- Size
  
  550KB
- MD5
  
  d50edbafe5ecdfe52f15b8b5d6858b9f
- SHA1
  
  c3f5d3fcac4bda16a163f21a3789b1e9083ff71b
- SHA256
  
  9c62ca955548db017ec18d6bfd2e4a0cbf38721ad34aeb36fd985726e07dae91
- SHA512
  
  7c410554e7f062c07e3d78b794acb9b0c632683af420de73d10cc6fb3aad583591197a25e410c93eaffdeb6359d3fcb73f0a077cc736ea8deaa76b52b8f4347c
- SSDEEP
  
  12288:kcbPKFOuHx+wb3PpB0x+8dVNVmIWZyuwT7KmTD:tKFrx+wbRB38dVNVmTsuwT7K
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence