xorist | 6d79f58d913fc67ad47c344576bece4023eee9ff4a7a6252fe8feb0090bf07be | Triage

Sharing

General

Target

7fdd3bf6fe556ac99a332baf9f1ef47c_JaffaCakes118
Size

12KB
Sample

241030-tj1ndawjaw
MD5

7fdd3bf6fe556ac99a332baf9f1ef47c
SHA1

61dfdc41b868ce2ff7407aa6da1a25c145b0b95c
SHA256

6d79f58d913fc67ad47c344576bece4023eee9ff4a7a6252fe8feb0090bf07be
SHA512

f7c796e0a3af6ead6fc4caa7821e1dd9a403546156039cf76d33d77b17dc31a717683b6e90c18fafc6b58e722accd6663b4d6b94bdf9150a4e385c5e395d591c
SSDEEP

192:J/TrG62a6B10kcg4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMCZgWOS9p:JebFNr4Pk1itKkpAjjJs6B40WCyWOg

Score

10^/10

xorist discovery persistence

Malware Config

Targets

- Target
  
  7fdd3bf6fe556ac99a332baf9f1ef47c_JaffaCakes118
- Size
  
  12KB
- MD5
  
  7fdd3bf6fe556ac99a332baf9f1ef47c
- SHA1
  
  61dfdc41b868ce2ff7407aa6da1a25c145b0b95c
- SHA256
  
  6d79f58d913fc67ad47c344576bece4023eee9ff4a7a6252fe8feb0090bf07be
- SHA512
  
  f7c796e0a3af6ead6fc4caa7821e1dd9a403546156039cf76d33d77b17dc31a717683b6e90c18fafc6b58e722accd6663b4d6b94bdf9150a4e385c5e395d591c
- SSDEEP
  
  192:J/TrG62a6B10kcg4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMCZgWOS9p:JebFNr4Pk1itKkpAjjJs6B40WCyWOg
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence