00e860faee4a41a04548e6d192752025ff3e7797b5ea79af28ec79717967a412 | Triage

Sharing

General

Target

eacc26a7f13e6d7966a24a203be1209c_JaffaCakes118
Size

171KB
Sample

240919-hnxazawekn
MD5

eacc26a7f13e6d7966a24a203be1209c
SHA1

eca7e96b7f7281258482a7b6a6321040ff5005dd
SHA256

00e860faee4a41a04548e6d192752025ff3e7797b5ea79af28ec79717967a412
SHA512

9700680580a38c3ebc9aa06b168f20e49c8c99ff306d606f13bc90b85f9e081aa5bfb813d66af02a270ec8c828fc6a5fe62d5ade44476ad1c1ca25b8c6dd22cd
SSDEEP

3072:HyqBbuCxjjuRmh/EPcBJK5OTOHP4PbCHdBABuH/hci+PIZsRu:H7BbuCxjjZUsJKcTOv4JBbSZ

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  eacc26a7f13e6d7966a24a203be1209c_JaffaCakes118
- Size
  
  171KB
- MD5
  
  eacc26a7f13e6d7966a24a203be1209c
- SHA1
  
  eca7e96b7f7281258482a7b6a6321040ff5005dd
- SHA256
  
  00e860faee4a41a04548e6d192752025ff3e7797b5ea79af28ec79717967a412
- SHA512
  
  9700680580a38c3ebc9aa06b168f20e49c8c99ff306d606f13bc90b85f9e081aa5bfb813d66af02a270ec8c828fc6a5fe62d5ade44476ad1c1ca25b8c6dd22cd
- SSDEEP
  
  3072:HyqBbuCxjjuRmh/EPcBJK5OTOHP4PbCHdBABuH/hci+PIZsRu:H7BbuCxjjZUsJKcTOv4JBbSZ
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence