1684deea7751bba8f0e3c03760dc79ea36455e060d3be2bf33268d8793051389 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc2fa8df7a150349c92bcc6a0cde81d6_JaffaCakes118
Size

260KB
Sample

240912-l3x3la1gjn
MD5

dc2fa8df7a150349c92bcc6a0cde81d6
SHA1

4357985d42dc031693fc3008c10cc112526f902c
SHA256

1684deea7751bba8f0e3c03760dc79ea36455e060d3be2bf33268d8793051389
SHA512

7cdaaafc6a9c7a5fa382011609b4a416cdcda129919e0a30e9624c9edbe10808b53572759c02069d2e8b8b5e6129a5e241495d40a0e4549885a82bc62813dd25
SSDEEP

6144:hpa4uouQ9P4raSa6G5jiZERtJKWFVcVm5CY9vuZon:1upaZ6GeERtJKgUm8YBuen

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  dc2fa8df7a150349c92bcc6a0cde81d6_JaffaCakes118
- Size
  
  260KB
- MD5
  
  dc2fa8df7a150349c92bcc6a0cde81d6
- SHA1
  
  4357985d42dc031693fc3008c10cc112526f902c
- SHA256
  
  1684deea7751bba8f0e3c03760dc79ea36455e060d3be2bf33268d8793051389
- SHA512
  
  7cdaaafc6a9c7a5fa382011609b4a416cdcda129919e0a30e9624c9edbe10808b53572759c02069d2e8b8b5e6129a5e241495d40a0e4549885a82bc62813dd25
- SSDEEP
  
  6144:hpa4uouQ9P4raSa6G5jiZERtJKWFVcVm5CY9vuZon:1upaZ6GeERtJKgUm8YBuen
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence