d95f9be10fa90ad1331f5045afe4f7c075ecd638a299692c6ad0e9a4ee57321e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60f233bd11bc8f7c5c465cee4f0aeb2_JaffaCakes118
Size

61KB
Sample

240909-lnrl9stgqf
MD5

d60f233bd11bc8f7c5c465cee4f0aeb2
SHA1

4645b433236e4d823570cd731f6140c169e298ac
SHA256

d95f9be10fa90ad1331f5045afe4f7c075ecd638a299692c6ad0e9a4ee57321e
SHA512

a2c7a827117ed9ea39785c1214a7b1aab3929d80a2dd90dfc545ba37e2afc9c8d6ba2df87a9317e697b24f1a5bb98be1241a266f7ee60eb972fb6a361c6e31c0
SSDEEP

1536:8varG9BByMTFczBveDlwh9fAKHVrSGSjjh0OYMWkrrcO1x:8vdBLGzBv4la9zVOh1Ok

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d60f233bd11bc8f7c5c465cee4f0aeb2_JaffaCakes118
- Size
  
  61KB
- MD5
  
  d60f233bd11bc8f7c5c465cee4f0aeb2
- SHA1
  
  4645b433236e4d823570cd731f6140c169e298ac
- SHA256
  
  d95f9be10fa90ad1331f5045afe4f7c075ecd638a299692c6ad0e9a4ee57321e
- SHA512
  
  a2c7a827117ed9ea39785c1214a7b1aab3929d80a2dd90dfc545ba37e2afc9c8d6ba2df87a9317e697b24f1a5bb98be1241a266f7ee60eb972fb6a361c6e31c0
- SSDEEP
  
  1536:8varG9BByMTFczBveDlwh9fAKHVrSGSjjh0OYMWkrrcO1x:8vdBLGzBv4la9zVOh1Ok
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2