c0684f0087cafe379040181528df7e1b705a7285af1792ccf14165dd8ad29f30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daf424af05fad3f2dcf6da3a4d2c2f3a_JaffaCakes118
Size

280KB
Sample

240911-wx7d7awbmb
MD5

daf424af05fad3f2dcf6da3a4d2c2f3a
SHA1

9451ec4066f79fb9d6e8d3b5308e0705ab031195
SHA256

c0684f0087cafe379040181528df7e1b705a7285af1792ccf14165dd8ad29f30
SHA512

e2209dcec594e27290ab1fde1b91b6004dd4f9a9c7c5b185141503926639e41014fb4521fbcb276ff1e9663f1faba38d82036c13381ce293ab20e53e4a053a47
SSDEEP

6144:eHtEkhvZ+wsrd83xOLQT+7vdXzLirYqAdd/S9TB2bL:+hvZ+YxQQT25IADS9T0

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  daf424af05fad3f2dcf6da3a4d2c2f3a_JaffaCakes118
- Size
  
  280KB
- MD5
  
  daf424af05fad3f2dcf6da3a4d2c2f3a
- SHA1
  
  9451ec4066f79fb9d6e8d3b5308e0705ab031195
- SHA256
  
  c0684f0087cafe379040181528df7e1b705a7285af1792ccf14165dd8ad29f30
- SHA512
  
  e2209dcec594e27290ab1fde1b91b6004dd4f9a9c7c5b185141503926639e41014fb4521fbcb276ff1e9663f1faba38d82036c13381ce293ab20e53e4a053a47
- SSDEEP
  
  6144:eHtEkhvZ+wsrd83xOLQT+7vdXzLirYqAdd/S9TB2bL:+hvZ+YxQQT25IADS9T0
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence