e7a63d3753861f8f25e6f367590c94232849b7e5b85aa7f1ad50874ac038176f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

010cdf0f94fe7d1e58adb234bb664526_JaffaCakes118
Size

24KB
Sample

240930-nf2hlsxajc
MD5

010cdf0f94fe7d1e58adb234bb664526
SHA1

4fed3c95c741f9eb9ead3ea33b5c6033157377c0
SHA256

e7a63d3753861f8f25e6f367590c94232849b7e5b85aa7f1ad50874ac038176f
SHA512

93f12e360820b3b1a6d0ca0c37c389fbaf34882550a4fe4f7d934ef58041095f82499175db4f7a4563ac5902d7919fe0bb938704cc32dc51d00a5ac21c33029b
SSDEEP

384:E3eVES+/xwGkRKJilM61qmTTMVF9/q5n0:bGS+ZfbJiO8qYoA0

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  010cdf0f94fe7d1e58adb234bb664526_JaffaCakes118
- Size
  
  24KB
- MD5
  
  010cdf0f94fe7d1e58adb234bb664526
- SHA1
  
  4fed3c95c741f9eb9ead3ea33b5c6033157377c0
- SHA256
  
  e7a63d3753861f8f25e6f367590c94232849b7e5b85aa7f1ad50874ac038176f
- SHA512
  
  93f12e360820b3b1a6d0ca0c37c389fbaf34882550a4fe4f7d934ef58041095f82499175db4f7a4563ac5902d7919fe0bb938704cc32dc51d00a5ac21c33029b
- SSDEEP
  
  384:E3eVES+/xwGkRKJilM61qmTTMVF9/q5n0:bGS+ZfbJiO8qYoA0
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence