fb231c925d5d3db811c57efc2119fb19e0244503ec22acf4e7cbfdb7119b0410 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb75943f6f0715435d7481a007a17dfc_JaffaCakes118
Size

318KB
Sample

240928-ekd4fawbpp
MD5

fb75943f6f0715435d7481a007a17dfc
SHA1

a4aa67a440aadd48ba35d2c34ab834e048090c7b
SHA256

fb231c925d5d3db811c57efc2119fb19e0244503ec22acf4e7cbfdb7119b0410
SHA512

2bf56aefd3a77b01e2ba5b8cc4e03fa330b5e1d1faba8541b3baa5d29f230a0357fb8d183b48d2814a7f4ece41dc9f5e5263ae799e6f50d1a98bd07195bb2290
SSDEEP

3072:z9Ikv1RsWxkFMmEjUufEo9+7MTiMfxHDeTJJDE5qyZi4mCxxHtX9r1j3jPm61p3c:EWcMmEj6oU7MR8JD+o9+a8iMxE

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  fb75943f6f0715435d7481a007a17dfc_JaffaCakes118
- Size
  
  318KB
- MD5
  
  fb75943f6f0715435d7481a007a17dfc
- SHA1
  
  a4aa67a440aadd48ba35d2c34ab834e048090c7b
- SHA256
  
  fb231c925d5d3db811c57efc2119fb19e0244503ec22acf4e7cbfdb7119b0410
- SHA512
  
  2bf56aefd3a77b01e2ba5b8cc4e03fa330b5e1d1faba8541b3baa5d29f230a0357fb8d183b48d2814a7f4ece41dc9f5e5263ae799e6f50d1a98bd07195bb2290
- SSDEEP
  
  3072:z9Ikv1RsWxkFMmEjUufEo9+7MTiMfxHDeTJJDE5qyZi4mCxxHtX9r1j3jPm61p3c:EWcMmEj6oU7MR8JD+o9+a8iMxE
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence