200706b11b9ccf4e11cbc66978450b99646d876f6cbb92b3d19e2fdc9d9b8aee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d67af2a0a9d2c8d6259225d28349cad1_JaffaCakes118
Size

14KB
Sample

240909-rhsj9svbne
MD5

d67af2a0a9d2c8d6259225d28349cad1
SHA1

8e0fc2feb293e3840e122741a866c62d1afd849d
SHA256

200706b11b9ccf4e11cbc66978450b99646d876f6cbb92b3d19e2fdc9d9b8aee
SHA512

abf23f7f9ab9401d045a35f2ce4f3b496b3ebe94d3826cb988c49052322af4f872a1f6bbe755340d9f544b4254fc13677c487a34793fba373f939924a9cdcf0d
SSDEEP

192:nbWDPX6I5ANGCO4+QC+XwfhHM9NKG1t1uFqZ3c/u7RHDPLXTfbnPLvrS3mfjb2WW:65ANrC7p5Wwuvy/XtzKoQ4uAEGx2Y

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d67af2a0a9d2c8d6259225d28349cad1_JaffaCakes118
- Size
  
  14KB
- MD5
  
  d67af2a0a9d2c8d6259225d28349cad1
- SHA1
  
  8e0fc2feb293e3840e122741a866c62d1afd849d
- SHA256
  
  200706b11b9ccf4e11cbc66978450b99646d876f6cbb92b3d19e2fdc9d9b8aee
- SHA512
  
  abf23f7f9ab9401d045a35f2ce4f3b496b3ebe94d3826cb988c49052322af4f872a1f6bbe755340d9f544b4254fc13677c487a34793fba373f939924a9cdcf0d
- SSDEEP
  
  192:nbWDPX6I5ANGCO4+QC+XwfhHM9NKG1t1uFqZ3c/u7RHDPLXTfbnPLvrS3mfjb2WW:65ANrC7p5Wwuvy/XtzKoQ4uAEGx2Y
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence