gh0strat | 454320d1af3ead2478c0f5c36fe71ef3d2d7bea4ec57b7ea9ee12098e8e43e73 | Triage

Sharing

General

Target

JaffaCakes118_4d1d05be227d4a12f13a37d2409556ad
Size

328KB
Sample

250128-vcgglavnc1
MD5

4d1d05be227d4a12f13a37d2409556ad
SHA1

b8d81a30234d24162470c0aba6f47614fe0da78b
SHA256

454320d1af3ead2478c0f5c36fe71ef3d2d7bea4ec57b7ea9ee12098e8e43e73
SHA512

af1fb74b89fb241f2bb72f064f2408207389726d1a7b309745078281767a8bb79a4f029898bc93fec4562cf8a1232db3426e6444fd292d99f4fbddb573729042
SSDEEP

6144:diyIWB0AL7t5J5Gp34Enx4G7v4G7AWFWZyD:QkB0Ad5rGN7LJA7YD

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_4d1d05be227d4a12f13a37d2409556ad
- Size
  
  328KB
- MD5
  
  4d1d05be227d4a12f13a37d2409556ad
- SHA1
  
  b8d81a30234d24162470c0aba6f47614fe0da78b
- SHA256
  
  454320d1af3ead2478c0f5c36fe71ef3d2d7bea4ec57b7ea9ee12098e8e43e73
- SHA512
  
  af1fb74b89fb241f2bb72f064f2408207389726d1a7b309745078281767a8bb79a4f029898bc93fec4562cf8a1232db3426e6444fd292d99f4fbddb573729042
- SSDEEP
  
  6144:diyIWB0AL7t5J5Gp34Enx4G7v4G7AWFWZyD:QkB0Ad5rGN7LJA7YD
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence