cd11e6af8dafe0686a8c3d572cd4fa0ab253228c4fc560dd7445e5fcea7800d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef63f65bab0d3ed3abb2e2fc5a329af6_JaffaCakes118
Size

395KB
Sample

240921-j5f6rasfrq
MD5

ef63f65bab0d3ed3abb2e2fc5a329af6
SHA1

915f1ab1467656a1e3aa3898a019153a960bfbdd
SHA256

cd11e6af8dafe0686a8c3d572cd4fa0ab253228c4fc560dd7445e5fcea7800d8
SHA512

a0f0ec26eded4b924813cfd44c5fb48078186caf338bd2f72e66b66cda791790448e7940c81420abba518f96a18386278a018c3ebf5b2c0a7577693d2836f10c
SSDEEP

6144:bj5itaGQpdMreYdsoVwuFxvUkAnBFxkj3fBJCR7LczRGmyfNQRLBVCDvigDNqwNz:v5i5NvYFmlJ+fyRLBVCDvz9P7

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef63f65bab0d3ed3abb2e2fc5a329af6_JaffaCakes118
- Size
  
  395KB
- MD5
  
  ef63f65bab0d3ed3abb2e2fc5a329af6
- SHA1
  
  915f1ab1467656a1e3aa3898a019153a960bfbdd
- SHA256
  
  cd11e6af8dafe0686a8c3d572cd4fa0ab253228c4fc560dd7445e5fcea7800d8
- SHA512
  
  a0f0ec26eded4b924813cfd44c5fb48078186caf338bd2f72e66b66cda791790448e7940c81420abba518f96a18386278a018c3ebf5b2c0a7577693d2836f10c
- SSDEEP
  
  6144:bj5itaGQpdMreYdsoVwuFxvUkAnBFxkj3fBJCR7LczRGmyfNQRLBVCDvigDNqwNz:v5i5NvYFmlJ+fyRLBVCDvz9P7
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence