d9dc312d208f6083c748b977f93fb07d46ff0670a8caff55398f57ab4e507396 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c8a752b476ae96bc3b89f29beab6024_JaffaCakes118
Size

44KB
Sample

241002-1eznvayapm
MD5

0c8a752b476ae96bc3b89f29beab6024
SHA1

d9825abbc32cb3edeba611c41cfb57be1cb85816
SHA256

d9dc312d208f6083c748b977f93fb07d46ff0670a8caff55398f57ab4e507396
SHA512

94680fcdd2c3d433b442ec5bbaf5529f6170dfb62f38682c60e75b089034698f76e8a8427449619ffeec3d72a058a7b54d75649a32801239594a3cf4adba3068
SSDEEP

384:DrJCTtNXUhXjXG1UQDY5j2E7QBuOkEQ+bpmSjxmqTNBrxihEo:/8tNkhXDQUQDY5jIBw+bTjxmE

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  0c8a752b476ae96bc3b89f29beab6024_JaffaCakes118
- Size
  
  44KB
- MD5
  
  0c8a752b476ae96bc3b89f29beab6024
- SHA1
  
  d9825abbc32cb3edeba611c41cfb57be1cb85816
- SHA256
  
  d9dc312d208f6083c748b977f93fb07d46ff0670a8caff55398f57ab4e507396
- SHA512
  
  94680fcdd2c3d433b442ec5bbaf5529f6170dfb62f38682c60e75b089034698f76e8a8427449619ffeec3d72a058a7b54d75649a32801239594a3cf4adba3068
- SSDEEP
  
  384:DrJCTtNXUhXjXG1UQDY5j2E7QBuOkEQ+bpmSjxmqTNBrxihEo:/8tNkhXDQUQDY5jIBw+bTjxmE
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence