7cc9c6697ecde08d8d9f79252e460f780e8c2b54b1617a4e6a24ed7d0497a44a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aa23700ae0979c9ccced0aacfe2e79a_JaffaCakes118
Size

24KB
Sample

241002-pjecxswalq
MD5

0aa23700ae0979c9ccced0aacfe2e79a
SHA1

ff57289d7aab7ab95721f8d99f132c2a2276d603
SHA256

7cc9c6697ecde08d8d9f79252e460f780e8c2b54b1617a4e6a24ed7d0497a44a
SHA512

5c4491a0f62b952fa7cadd8f14a71521968c390f38eebc8d399e22a459a04aec2b3c07fe8c74d4205c573ca87598a5e8a69616e13a5e932595be56a62a8fe8bc
SSDEEP

384:E3eVES+/xwGkRKJkxTdlM61qmTTMVF9/q5F0:bGS+ZfbJkxTdO8qYoAK

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  0aa23700ae0979c9ccced0aacfe2e79a_JaffaCakes118
- Size
  
  24KB
- MD5
  
  0aa23700ae0979c9ccced0aacfe2e79a
- SHA1
  
  ff57289d7aab7ab95721f8d99f132c2a2276d603
- SHA256
  
  7cc9c6697ecde08d8d9f79252e460f780e8c2b54b1617a4e6a24ed7d0497a44a
- SHA512
  
  5c4491a0f62b952fa7cadd8f14a71521968c390f38eebc8d399e22a459a04aec2b3c07fe8c74d4205c573ca87598a5e8a69616e13a5e932595be56a62a8fe8bc
- SSDEEP
  
  384:E3eVES+/xwGkRKJkxTdlM61qmTTMVF9/q5F0:bGS+ZfbJkxTdO8qYoAK
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence