c11919a4a436e5a72f2380c9a4b14e2ba90872b7983c254854444d9c07b7ef74 | Triage

Sharing

General

Target

0d4fc7a095441eb6e6175bc5a5946c59_JaffaCakes118
Size

131KB
Sample

241003-bx5kda1erb
MD5

0d4fc7a095441eb6e6175bc5a5946c59
SHA1

88393007f177b230323139802e9b988f4af35944
SHA256

c11919a4a436e5a72f2380c9a4b14e2ba90872b7983c254854444d9c07b7ef74
SHA512

32e1045bc47c5c0464d035e1f56d4df67d0d70fa531571d27f4fb735c4c347a9d4a6dcabfa9c0c7e4e941ad226e9ae52be50fc100a4f58b22777d21261b44545
SSDEEP

3072:qRTKehQJkIhAdrqC2NFt91qZC7hzrn5xkXpEglAOkw:S/hQlhAtmtac7hztxtmAOX

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  0d4fc7a095441eb6e6175bc5a5946c59_JaffaCakes118
- Size
  
  131KB
- MD5
  
  0d4fc7a095441eb6e6175bc5a5946c59
- SHA1
  
  88393007f177b230323139802e9b988f4af35944
- SHA256
  
  c11919a4a436e5a72f2380c9a4b14e2ba90872b7983c254854444d9c07b7ef74
- SHA512
  
  32e1045bc47c5c0464d035e1f56d4df67d0d70fa531571d27f4fb735c4c347a9d4a6dcabfa9c0c7e4e941ad226e9ae52be50fc100a4f58b22777d21261b44545
- SSDEEP
  
  3072:qRTKehQJkIhAdrqC2NFt91qZC7hzrn5xkXpEglAOkw:S/hQlhAtmtac7hztxtmAOX
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2