d8181b0cbfec040f23ff932364b471766016f846bb23790bed62530929846f34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ff6722efa018799d352fb05054a43b_JaffaCakes118
Size

85KB
Sample

241009-cnpy1asgnp
MD5

28ff6722efa018799d352fb05054a43b
SHA1

1992d8d542d19d8ae141c27f47100e19d21e2ee1
SHA256

d8181b0cbfec040f23ff932364b471766016f846bb23790bed62530929846f34
SHA512

f973a7ff0d6ad02a5c33a83b76a34e7da3e6759e61209008bbb82bed7bffb93d8456f9fcdfa5e0f2bfdc062128da69f84db095f19fe42a99d7b68416391682d6
SSDEEP

192:jKxFjkpCW8jnojXWpebhvy1Yi7EOCjYryREFa08x:YlkwrQWGhvy1Yi7E5jYry+M

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  28ff6722efa018799d352fb05054a43b_JaffaCakes118
- Size
  
  85KB
- MD5
  
  28ff6722efa018799d352fb05054a43b
- SHA1
  
  1992d8d542d19d8ae141c27f47100e19d21e2ee1
- SHA256
  
  d8181b0cbfec040f23ff932364b471766016f846bb23790bed62530929846f34
- SHA512
  
  f973a7ff0d6ad02a5c33a83b76a34e7da3e6759e61209008bbb82bed7bffb93d8456f9fcdfa5e0f2bfdc062128da69f84db095f19fe42a99d7b68416391682d6
- SSDEEP
  
  192:jKxFjkpCW8jnojXWpebhvy1Yi7EOCjYryREFa08x:YlkwrQWGhvy1Yi7E5jYry+M
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence