73f37ed9fd2c09f9a59526fc1f6b3a8187aa45a93bc54ab167193aac5d5d42be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a636204cb318c306bdc5a77e108aa51_JaffaCakes118
Size

2.6MB
Sample

241002-nd5ggsshrm
MD5

0a636204cb318c306bdc5a77e108aa51
SHA1

1f45be23769347d7bfd3510aceaea16883140b0b
SHA256

73f37ed9fd2c09f9a59526fc1f6b3a8187aa45a93bc54ab167193aac5d5d42be
SHA512

7b225f38b2c1c48565d83c291d2057b50a79d8e937c6b3a88181a6274845e4dd917e515134e8b0170a25714c9ecacd1d0d203fbbac7c6c3ca4fa5cbe3e968f45
SSDEEP

49152:9PfqipFWe92dwgsLAv4jQKTo+yUUz/pyGOA0ZW/wgfAuga7C5iYZTSM5U:9p0eTgjv4jQKTo+yUUuEHAuiJZTSC

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  0a636204cb318c306bdc5a77e108aa51_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  0a636204cb318c306bdc5a77e108aa51
- SHA1
  
  1f45be23769347d7bfd3510aceaea16883140b0b
- SHA256
  
  73f37ed9fd2c09f9a59526fc1f6b3a8187aa45a93bc54ab167193aac5d5d42be
- SHA512
  
  7b225f38b2c1c48565d83c291d2057b50a79d8e937c6b3a88181a6274845e4dd917e515134e8b0170a25714c9ecacd1d0d203fbbac7c6c3ca4fa5cbe3e968f45
- SSDEEP
  
  49152:9PfqipFWe92dwgsLAv4jQKTo+yUUz/pyGOA0ZW/wgfAuga7C5iYZTSM5U:9p0eTgjv4jQKTo+yUUuEHAuiJZTSC
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2