e90f0cb9e30c68b6ef22556018d9e82d5614b855236d088065df80115c9e4ea4 | Triage

Sharing

General

Target

4620f6fc45c5c99fe81016ebc223dd4b_JaffaCakes118
Size

143KB
Sample

241015-gf8tcsxhnd
MD5

4620f6fc45c5c99fe81016ebc223dd4b
SHA1

36640da2789e8bbd5064d85c033319014ef4f085
SHA256

e90f0cb9e30c68b6ef22556018d9e82d5614b855236d088065df80115c9e4ea4
SHA512

0f7498db8ea10aa4b9309e2b4c58967e5f1c56a6cc6cce214afb38ed1b349a5b58505879ee8d0378a4a1cf61e0d63063504441d6261d402e2c6e254e99c7f77e
SSDEEP

3072:FsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XY:FplzpTVDVa2en/V6Mp

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  4620f6fc45c5c99fe81016ebc223dd4b_JaffaCakes118
- Size
  
  143KB
- MD5
  
  4620f6fc45c5c99fe81016ebc223dd4b
- SHA1
  
  36640da2789e8bbd5064d85c033319014ef4f085
- SHA256
  
  e90f0cb9e30c68b6ef22556018d9e82d5614b855236d088065df80115c9e4ea4
- SHA512
  
  0f7498db8ea10aa4b9309e2b4c58967e5f1c56a6cc6cce214afb38ed1b349a5b58505879ee8d0378a4a1cf61e0d63063504441d6261d402e2c6e254e99c7f77e
- SSDEEP
  
  3072:FsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XY:FplzpTVDVa2en/V6Mp
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence