f6a0c12005c7c44b17fe22dbcb36d8b273685c3834bfe0735877f161fa835bd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56bb78dda05f4114425983c5d9d36f28_JaffaCakes118
Size

212KB
Sample

241018-lpm1gazdkh
MD5

56bb78dda05f4114425983c5d9d36f28
SHA1

e2d1e40b6f931eaf5746a56b7413364ee245d69d
SHA256

f6a0c12005c7c44b17fe22dbcb36d8b273685c3834bfe0735877f161fa835bd2
SHA512

3b827e7792fd086916db0dbc08c937226d3a568ca8c91452030ea53c69df70a4b94fcfcca582537db30f7f0bf0a9c44ce3e86498e312da49a63af4c8c016454e
SSDEEP

6144:huD8916JTL4/6zPUBxh0rZyjjltfGdKkDw5oqTsT:991kTk/6jOhi4AKkDw57TsT

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  56bb78dda05f4114425983c5d9d36f28_JaffaCakes118
- Size
  
  212KB
- MD5
  
  56bb78dda05f4114425983c5d9d36f28
- SHA1
  
  e2d1e40b6f931eaf5746a56b7413364ee245d69d
- SHA256
  
  f6a0c12005c7c44b17fe22dbcb36d8b273685c3834bfe0735877f161fa835bd2
- SHA512
  
  3b827e7792fd086916db0dbc08c937226d3a568ca8c91452030ea53c69df70a4b94fcfcca582537db30f7f0bf0a9c44ce3e86498e312da49a63af4c8c016454e
- SSDEEP
  
  6144:huD8916JTL4/6zPUBxh0rZyjjltfGdKkDw5oqTsT:991kTk/6jOhi4AKkDw57TsT
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence