ac359eea83ae1334b6d03a58af5666508dd103d6543285d6d8574f63fe540d35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440b1e4a7cc4461aceeba488acf0a8e2_JaffaCakes118
Size

129KB
Sample

241014-y891kayerq
MD5

440b1e4a7cc4461aceeba488acf0a8e2
SHA1

18edec476ba53f15da5150f2d30141ee9da444c5
SHA256

ac359eea83ae1334b6d03a58af5666508dd103d6543285d6d8574f63fe540d35
SHA512

38f1e53d59cfb61095821df9c45c41161aa103eb9f323de367d58dc5d04f1a674cae27f054d942f3909b9ed3e61dc76fca9cf0599b8478585cfc43f3f971377d
SSDEEP

3072:gimU5U+ASQRKNJa8EfwdUxZBM7067a+i8NY45s1:gnMASQyJanRBM7Zi8Nhs

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  440b1e4a7cc4461aceeba488acf0a8e2_JaffaCakes118
- Size
  
  129KB
- MD5
  
  440b1e4a7cc4461aceeba488acf0a8e2
- SHA1
  
  18edec476ba53f15da5150f2d30141ee9da444c5
- SHA256
  
  ac359eea83ae1334b6d03a58af5666508dd103d6543285d6d8574f63fe540d35
- SHA512
  
  38f1e53d59cfb61095821df9c45c41161aa103eb9f323de367d58dc5d04f1a674cae27f054d942f3909b9ed3e61dc76fca9cf0599b8478585cfc43f3f971377d
- SSDEEP
  
  3072:gimU5U+ASQRKNJa8EfwdUxZBM7067a+i8NY45s1:gnMASQyJanRBM7Zi8Nhs
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence