f615191c6ff1309f43d490f2821a54056130772169a5d778062fdc1f6feeb53c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

547f4a605a4e75cf9aac9f0df4a8581c_JaffaCakes118
Size

4.7MB
Sample

241018-axjr8sycql
MD5

547f4a605a4e75cf9aac9f0df4a8581c
SHA1

a6d8b46fb0bf42e5d2263c8103b1f564c7d80d6c
SHA256

f615191c6ff1309f43d490f2821a54056130772169a5d778062fdc1f6feeb53c
SHA512

ef875e248fde518c4d95043fefbfb4b839cbaa1504052e344bf9a8ed8477f7de3c7cb6d5df8c3fe0353ca64a10639b99594bb89c4a21f08bf5be2e4a84811c76
SSDEEP

12288:u35CDjxCDjI3pDSsXiF03sCmiF01WANAbqRgphO0IcRoM+NlJHK4CcfsrVr8wsct:u3AjojUpWsSFKsCzFAEbDjGhY

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  547f4a605a4e75cf9aac9f0df4a8581c_JaffaCakes118
- Size
  
  4.7MB
- MD5
  
  547f4a605a4e75cf9aac9f0df4a8581c
- SHA1
  
  a6d8b46fb0bf42e5d2263c8103b1f564c7d80d6c
- SHA256
  
  f615191c6ff1309f43d490f2821a54056130772169a5d778062fdc1f6feeb53c
- SHA512
  
  ef875e248fde518c4d95043fefbfb4b839cbaa1504052e344bf9a8ed8477f7de3c7cb6d5df8c3fe0353ca64a10639b99594bb89c4a21f08bf5be2e4a84811c76
- SSDEEP
  
  12288:u35CDjxCDjI3pDSsXiF03sCmiF01WANAbqRgphO0IcRoM+NlJHK4CcfsrVr8wsct:u3AjojUpWsSFKsCzFAEbDjGhY
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence