gh0strat | 62f088bde87137d6880917edf01f046e19c0bf64c90e76ddf7b8418c30b25099 | Triage

Sharing

General

Target

JaffaCakes118_4baf6f31baa0072ce96c99e62676618a
Size

936KB
Sample

250128-rcnzws1kat
MD5

4baf6f31baa0072ce96c99e62676618a
SHA1

56038f6ed44b0777efe0ffe8acce14eb2702f3fc
SHA256

62f088bde87137d6880917edf01f046e19c0bf64c90e76ddf7b8418c30b25099
SHA512

9562f223d1aa9ddfc317cc92407522e6798b10052eed9c835886f4635f2cdb38f2298d049d8d96d569682a8deffda0bb0353fa403652ad449c47ca674f9ab715
SSDEEP

12288:wW1TvEfvAgEr+TPo/RxKtWlUlUma9M6uM5n:waEfvAgEr+TPo/RxKkUim16uM5n

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_4baf6f31baa0072ce96c99e62676618a
- Size
  
  936KB
- MD5
  
  4baf6f31baa0072ce96c99e62676618a
- SHA1
  
  56038f6ed44b0777efe0ffe8acce14eb2702f3fc
- SHA256
  
  62f088bde87137d6880917edf01f046e19c0bf64c90e76ddf7b8418c30b25099
- SHA512
  
  9562f223d1aa9ddfc317cc92407522e6798b10052eed9c835886f4635f2cdb38f2298d049d8d96d569682a8deffda0bb0353fa403652ad449c47ca674f9ab715
- SSDEEP
  
  12288:wW1TvEfvAgEr+TPo/RxKtWlUlUma9M6uM5n:waEfvAgEr+TPo/RxKkUim16uM5n
Score

6^/10

persistence discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence