ff8112c3ffc444015922f916487ab252022c37a6ed16f0bf7dacc62bfa351526 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01778f5bfc51b384f03d9bc3304f6e0_JaffaCakes118
Size

324KB
Sample

240921-swp7qszejm
MD5

f01778f5bfc51b384f03d9bc3304f6e0
SHA1

f58ddff6c5fa10d9aa0e28788945d57beda1f003
SHA256

ff8112c3ffc444015922f916487ab252022c37a6ed16f0bf7dacc62bfa351526
SHA512

82656f928ffabdb7a4a019cd812571f4fa6005f6d6f8c33da67caa850dced3f5b815c8e2319ecb0206c543606a68ab582f483d84018cad785d5547d3a6a19b99
SSDEEP

3072:m9Ikv1RsWxkFMmEjUufEo9+7rTiMfxHDeTJJDglqmZi4mCxxHtX9r1j3jPmO1p3R:LWcMmEj6oU7rR8JDmV1Vi8iMxEO

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  f01778f5bfc51b384f03d9bc3304f6e0_JaffaCakes118
- Size
  
  324KB
- MD5
  
  f01778f5bfc51b384f03d9bc3304f6e0
- SHA1
  
  f58ddff6c5fa10d9aa0e28788945d57beda1f003
- SHA256
  
  ff8112c3ffc444015922f916487ab252022c37a6ed16f0bf7dacc62bfa351526
- SHA512
  
  82656f928ffabdb7a4a019cd812571f4fa6005f6d6f8c33da67caa850dced3f5b815c8e2319ecb0206c543606a68ab582f483d84018cad785d5547d3a6a19b99
- SSDEEP
  
  3072:m9Ikv1RsWxkFMmEjUufEo9+7rTiMfxHDeTJJDglqmZi4mCxxHtX9r1j3jPmO1p3R:LWcMmEj6oU7rR8JDmV1Vi8iMxEO
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence