ce779f6eeffb049762f052b5920577478d2b78f1145884764062bf51d3ea6fb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c095e3cf70f47f50022998921f27c1c_JaffaCakes118
Size

946KB
Sample

241009-gl5c5azanh
MD5

2c095e3cf70f47f50022998921f27c1c
SHA1

404bdb9e2f55611bf37d008c5da46ab8561f2bc4
SHA256

ce779f6eeffb049762f052b5920577478d2b78f1145884764062bf51d3ea6fb6
SHA512

a3bd29463c2c67ebfc3369b36450f3c7e790ec860f3ed65b8945eb3d8022f800544d325c90c5227b3c11c811935c3f666351caebe5e820ba6de16a5f6cbcca60
SSDEEP

24576:9WeB2RNfY46dLjHFxbofQ6VXF0LAntqlgjXBTEsdF4Sp:B0846FlFyVJoOTEsLB

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  2c095e3cf70f47f50022998921f27c1c_JaffaCakes118
- Size
  
  946KB
- MD5
  
  2c095e3cf70f47f50022998921f27c1c
- SHA1
  
  404bdb9e2f55611bf37d008c5da46ab8561f2bc4
- SHA256
  
  ce779f6eeffb049762f052b5920577478d2b78f1145884764062bf51d3ea6fb6
- SHA512
  
  a3bd29463c2c67ebfc3369b36450f3c7e790ec860f3ed65b8945eb3d8022f800544d325c90c5227b3c11c811935c3f666351caebe5e820ba6de16a5f6cbcca60
- SSDEEP
  
  24576:9WeB2RNfY46dLjHFxbofQ6VXF0LAntqlgjXBTEsdF4Sp:B0846FlFyVJoOTEsLB
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence