gh0strat | 5360532997ff0d042adc99d89837cb4516237793173be811759d7de7d68dd3a2 | Triage

Sharing

General

Target

JaffaCakes118_36f62ac5bd9bb0170966e72d74fc2e30
Size

119KB
Sample

250301-fykzks1vdx
MD5

36f62ac5bd9bb0170966e72d74fc2e30
SHA1

6face55c9b3688144e4c8ae9bf8633c3c0147939
SHA256

5360532997ff0d042adc99d89837cb4516237793173be811759d7de7d68dd3a2
SHA512

760bf203cf98665725f671d6f64b6c5e9273546730c41e13e83c48c8f4ea4645669882868dc00edb64a4b5a6c1bf953d6b0471e2fd061738cfc8843ac6ed5922
SSDEEP

3072:5+RGr/IKKNwhTPu3FwuBcpSf17iv83P8XybU:Awr/IK1PyZBYwGv83P8Xn

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_36f62ac5bd9bb0170966e72d74fc2e30
- Size
  
  119KB
- MD5
  
  36f62ac5bd9bb0170966e72d74fc2e30
- SHA1
  
  6face55c9b3688144e4c8ae9bf8633c3c0147939
- SHA256
  
  5360532997ff0d042adc99d89837cb4516237793173be811759d7de7d68dd3a2
- SHA512
  
  760bf203cf98665725f671d6f64b6c5e9273546730c41e13e83c48c8f4ea4645669882868dc00edb64a4b5a6c1bf953d6b0471e2fd061738cfc8843ac6ed5922
- SSDEEP
  
  3072:5+RGr/IKKNwhTPu3FwuBcpSf17iv83P8XybU:Awr/IK1PyZBYwGv83P8Xn
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence