56fa9a8549312974f3b94ac7555929f735c2124b97fd24c28dd36a9d95bccf29 | Triage

Sharing

General

Target

ebb78ea2cb64d0472f4b37072890ca54_JaffaCakes118
Size

140KB
Sample

240919-tr8nysyckk
MD5

ebb78ea2cb64d0472f4b37072890ca54
SHA1

0e6071b4f3061f8bc640aeabbba7597516e7a7d6
SHA256

56fa9a8549312974f3b94ac7555929f735c2124b97fd24c28dd36a9d95bccf29
SHA512

c8c45cae8e5b64e944c40b359f657c3add241abee1d3b440995983528b52381663cc6026c50d1c694732f171dccf098572fabb0dce9038e3c03bbd1309a893d4
SSDEEP

3072:xBVOaHWQf1LjXuyn/V9kyrXAVOaHWQf1L2:DVOCWQf1TlVpAVOCWQf1

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  ebb78ea2cb64d0472f4b37072890ca54_JaffaCakes118
- Size
  
  140KB
- MD5
  
  ebb78ea2cb64d0472f4b37072890ca54
- SHA1
  
  0e6071b4f3061f8bc640aeabbba7597516e7a7d6
- SHA256
  
  56fa9a8549312974f3b94ac7555929f735c2124b97fd24c28dd36a9d95bccf29
- SHA512
  
  c8c45cae8e5b64e944c40b359f657c3add241abee1d3b440995983528b52381663cc6026c50d1c694732f171dccf098572fabb0dce9038e3c03bbd1309a893d4
- SSDEEP
  
  3072:xBVOaHWQf1LjXuyn/V9kyrXAVOaHWQf1L2:DVOCWQf1TlVpAVOCWQf1
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence