d6c59a0a250bcd83eacdc5abdc575e9232af2f8c04f727771096274733ce331e | Triage

Sharing

General

Target

f5fcdc8d71d42f149bc0ef28d0b6211d_JaffaCakes118
Size

39KB
Sample

240925-pdp78svblp
MD5

f5fcdc8d71d42f149bc0ef28d0b6211d
SHA1

fdca9eba332761a6251a098e5b935ceb39276213
SHA256

d6c59a0a250bcd83eacdc5abdc575e9232af2f8c04f727771096274733ce331e
SHA512

2530cc01f43d0050e4211e402cf0fcf63003f03baebec38d9e3eb6a520aad3d7a85ee1417ab4f95b43ada9ce1657608dac280b8286fa807679d051fb7498aaa2
SSDEEP

768:2RLR+rf97PNN7ejvo/xZ5JINwxvSZ1Qn19vbQ64+IMccC:2xR8fBNNWej5Jk0SXqvb90MccC

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  f5fcdc8d71d42f149bc0ef28d0b6211d_JaffaCakes118
- Size
  
  39KB
- MD5
  
  f5fcdc8d71d42f149bc0ef28d0b6211d
- SHA1
  
  fdca9eba332761a6251a098e5b935ceb39276213
- SHA256
  
  d6c59a0a250bcd83eacdc5abdc575e9232af2f8c04f727771096274733ce331e
- SHA512
  
  2530cc01f43d0050e4211e402cf0fcf63003f03baebec38d9e3eb6a520aad3d7a85ee1417ab4f95b43ada9ce1657608dac280b8286fa807679d051fb7498aaa2
- SSDEEP
  
  768:2RLR+rf97PNN7ejvo/xZ5JINwxvSZ1Qn19vbQ64+IMccC:2xR8fBNNWej5Jk0SXqvb90MccC
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence