e960990a970e9730cc29b3991eae8ac829984097f1b8f000066ce074ad0772aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118
Size

218KB
Sample

241005-fasphszfre
MD5

163262286eb27cdf9739eb7dfaf3cbf3
SHA1

6baeb505d20f09221278376b795ffe605da5f5ca
SHA256

e960990a970e9730cc29b3991eae8ac829984097f1b8f000066ce074ad0772aa
SHA512

52ecb3c5bbbbac70b9291739295ca9d5d2f5876caabdee5abc7c0a85d2a655091757ac873e8617f2a53bd50aaa78f33c2126d06a3577ba23c946f91bea675ea1
SSDEEP

6144:Bq/is02fxUnleJeG3uERsBiJuQMetE86F:BqDHpUnleJ7uETJuQLt96

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118
- Size
  
  218KB
- MD5
  
  163262286eb27cdf9739eb7dfaf3cbf3
- SHA1
  
  6baeb505d20f09221278376b795ffe605da5f5ca
- SHA256
  
  e960990a970e9730cc29b3991eae8ac829984097f1b8f000066ce074ad0772aa
- SHA512
  
  52ecb3c5bbbbac70b9291739295ca9d5d2f5876caabdee5abc7c0a85d2a655091757ac873e8617f2a53bd50aaa78f33c2126d06a3577ba23c946f91bea675ea1
- SSDEEP
  
  6144:Bq/is02fxUnleJeG3uERsBiJuQMetE86F:BqDHpUnleJ7uETJuQLt96
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2