580603250f3474d84b4dec5c4d17cf72e8c202b35cee41fd3e184aeb6d8f613a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd470b2ec4325756f3ced9935662587_JaffaCakes118
Size

369KB
Sample

240930-dlrv9avcpl
MD5

ffd470b2ec4325756f3ced9935662587
SHA1

d1bec296e0d90379b19c751f18d3ef7835edb4e2
SHA256

580603250f3474d84b4dec5c4d17cf72e8c202b35cee41fd3e184aeb6d8f613a
SHA512

d4a26abdea26371bb9142d70a4d0b2294285ec2434c48e3a32d92b0535bbf497f34f4d2fabaad669a4902bcd511955188774398a34db6ae18d3a3f6c04e3a749
SSDEEP

6144:NzvdtFyGZu0ydXDv1XeCLyvl0L3x6QInn4mwXjO5k7m0sHeLg+e9j0D:BXKdTv1OlwkQInpYjOrsgxO

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  ffd470b2ec4325756f3ced9935662587_JaffaCakes118
- Size
  
  369KB
- MD5
  
  ffd470b2ec4325756f3ced9935662587
- SHA1
  
  d1bec296e0d90379b19c751f18d3ef7835edb4e2
- SHA256
  
  580603250f3474d84b4dec5c4d17cf72e8c202b35cee41fd3e184aeb6d8f613a
- SHA512
  
  d4a26abdea26371bb9142d70a4d0b2294285ec2434c48e3a32d92b0535bbf497f34f4d2fabaad669a4902bcd511955188774398a34db6ae18d3a3f6c04e3a749
- SSDEEP
  
  6144:NzvdtFyGZu0ydXDv1XeCLyvl0L3x6QInn4mwXjO5k7m0sHeLg+e9j0D:BXKdTv1OlwkQInpYjOrsgxO
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence