gh0strat | 142a4a06331f18b4b875d9e878732dce8477253660a952c6fae23639d50ba41a | Triage

Sharing

General

Target

JaffaCakes118_3268f806e0968fa98b31b08dd30439dd
Size

114KB
Sample

250228-h3q3hatxdw
MD5

3268f806e0968fa98b31b08dd30439dd
SHA1

9180cd28909c81a7d6e9e754a5669be48ac2fb0e
SHA256

142a4a06331f18b4b875d9e878732dce8477253660a952c6fae23639d50ba41a
SHA512

f18105b5123a8e35afad26de53c43e7def29242b48d7e4fd3d291f3d821d556c71bac834bfc0624cb5f9c83dc88e126331525224fa5f0746d9d8070e696a8bf7
SSDEEP

3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KSiCbmN:Mpl2GkGMkSgb8Svlu5KSON

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_3268f806e0968fa98b31b08dd30439dd
- Size
  
  114KB
- MD5
  
  3268f806e0968fa98b31b08dd30439dd
- SHA1
  
  9180cd28909c81a7d6e9e754a5669be48ac2fb0e
- SHA256
  
  142a4a06331f18b4b875d9e878732dce8477253660a952c6fae23639d50ba41a
- SHA512
  
  f18105b5123a8e35afad26de53c43e7def29242b48d7e4fd3d291f3d821d556c71bac834bfc0624cb5f9c83dc88e126331525224fa5f0746d9d8070e696a8bf7
- SSDEEP
  
  3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KSiCbmN:Mpl2GkGMkSgb8Svlu5KSON
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence