eb976c1b12a7cdc2af2f27354ee38adee2c1f0aad6b2b27bd0fa9447009e4ded | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b91955bd627c5a38735f1a22dfbfc2_JaffaCakes118
Size

252KB
Sample

241008-2xe8lazekf
MD5

26b91955bd627c5a38735f1a22dfbfc2
SHA1

2b2d4e5e34fdf83826ecbb4b715b3c3a754a2f7d
SHA256

eb976c1b12a7cdc2af2f27354ee38adee2c1f0aad6b2b27bd0fa9447009e4ded
SHA512

650f4654dfad2e79938da739bccb476a7c5ef58c2c8957821a62e43ac624b9bef5f5602c685f8685865a49727c4e2400e60ac4815fef68bea2e8bd14fed7c069
SSDEEP

6144:MPmNVtJXx9m3+LT+CqHkl0t1gBDLBAXm:I8VtJXxZvykl41gBDLK

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  26b91955bd627c5a38735f1a22dfbfc2_JaffaCakes118
- Size
  
  252KB
- MD5
  
  26b91955bd627c5a38735f1a22dfbfc2
- SHA1
  
  2b2d4e5e34fdf83826ecbb4b715b3c3a754a2f7d
- SHA256
  
  eb976c1b12a7cdc2af2f27354ee38adee2c1f0aad6b2b27bd0fa9447009e4ded
- SHA512
  
  650f4654dfad2e79938da739bccb476a7c5ef58c2c8957821a62e43ac624b9bef5f5602c685f8685865a49727c4e2400e60ac4815fef68bea2e8bd14fed7c069
- SSDEEP
  
  6144:MPmNVtJXx9m3+LT+CqHkl0t1gBDLBAXm:I8VtJXxZvykl41gBDLK
Score

6^/10

persistence discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence