6737a5c406a2cc5415730091ab506468dab63fc0fdbe74fab0da76eb8b970ea7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2883f59a81f9e6ff058f7fc25d1f725f_JaffaCakes118
Size

146KB
Sample

241009-bzbebaygqr
MD5

2883f59a81f9e6ff058f7fc25d1f725f
SHA1

fe1b6a500b5eabce45e8b0e199b5ddf57d479f3f
SHA256

6737a5c406a2cc5415730091ab506468dab63fc0fdbe74fab0da76eb8b970ea7
SHA512

05d482bcc11817f7d904183e8e689ad848cf1403a0e65ba34bc731bae3f804d7c1ce9d7b1813a8f4fa0f7d444b89b21e77147fded97dc1009c15ff9a0363216d
SSDEEP

3072:wPQt3aMxzd3o9fUPHC56IXsLkce6p23CskJXljt/wOl2RkJdoGTIcg:wPhaCEHpMGljt/RYkLBo

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2883f59a81f9e6ff058f7fc25d1f725f_JaffaCakes118
- Size
  
  146KB
- MD5
  
  2883f59a81f9e6ff058f7fc25d1f725f
- SHA1
  
  fe1b6a500b5eabce45e8b0e199b5ddf57d479f3f
- SHA256
  
  6737a5c406a2cc5415730091ab506468dab63fc0fdbe74fab0da76eb8b970ea7
- SHA512
  
  05d482bcc11817f7d904183e8e689ad848cf1403a0e65ba34bc731bae3f804d7c1ce9d7b1813a8f4fa0f7d444b89b21e77147fded97dc1009c15ff9a0363216d
- SSDEEP
  
  3072:wPQt3aMxzd3o9fUPHC56IXsLkce6p23CskJXljt/wOl2RkJdoGTIcg:wPhaCEHpMGljt/RYkLBo
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Port Monitors
  Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Port Monitors

Privilege Escalation

Boot or Logon Autostart Execution

Port Monitors

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence