713c86b1308f3d4602f4463838789629a0d4f2b5e2d0c79e2968e5c4bacf2193 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fff8891f8a0a868d80ba758f9702cfaa_JaffaCakes118
Size

176KB
Sample

240930-e5zwmsybmm
MD5

fff8891f8a0a868d80ba758f9702cfaa
SHA1

063180bdc36c710fef3c09fff5bdd6055afd8296
SHA256

713c86b1308f3d4602f4463838789629a0d4f2b5e2d0c79e2968e5c4bacf2193
SHA512

a904c6be95e9d4dd85009762ff95edc33a15aac3a258cf172efe53ef47ecf45b8c7cd09a7ece92cad92c9108aa68d05ef9a4933301d749286c6ea21d974d0ece
SSDEEP

3072:QzudMumm5PN+nEktFHbcSjZWWWYpSMd5dz5PDDMMhNJksRgTcgF7eOy3hi:su5l2EkYSjrZd5dxkMhASOF7/y3w

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  fff8891f8a0a868d80ba758f9702cfaa_JaffaCakes118
- Size
  
  176KB
- MD5
  
  fff8891f8a0a868d80ba758f9702cfaa
- SHA1
  
  063180bdc36c710fef3c09fff5bdd6055afd8296
- SHA256
  
  713c86b1308f3d4602f4463838789629a0d4f2b5e2d0c79e2968e5c4bacf2193
- SHA512
  
  a904c6be95e9d4dd85009762ff95edc33a15aac3a258cf172efe53ef47ecf45b8c7cd09a7ece92cad92c9108aa68d05ef9a4933301d749286c6ea21d974d0ece
- SSDEEP
  
  3072:QzudMumm5PN+nEktFHbcSjZWWWYpSMd5dz5PDDMMhNJksRgTcgF7eOy3hi:su5l2EkYSjrZd5dxkMhASOF7/y3w
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence