gh0strat | 8b58c6444087807c00b330ce0131da063dae77ca0efecd9003f9396ad04f36e0 | Triage

Sharing

General

Target

JaffaCakes118_37e90e5549e60d3f2aa0c8ace3cdb160
Size

119KB
Sample

250301-khb4yswthz
MD5

37e90e5549e60d3f2aa0c8ace3cdb160
SHA1

e0d23765dab23049458d3a27ae4afe881b068d4d
SHA256

8b58c6444087807c00b330ce0131da063dae77ca0efecd9003f9396ad04f36e0
SHA512

f76c845a496d8c167a1343148759f9c54031e61d74ed3d96174acd40b036939e883e82fc4a75f4237c536df7e3fb3bdd9d7f0f404aabd844f4b8be1f03ba9ddf
SSDEEP

3072:5+RGr/IKKNwhTPu3FwuBcpSf17iv83P8XybW:Awr/IK1PyZBYwGv83P8X3

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_37e90e5549e60d3f2aa0c8ace3cdb160
- Size
  
  119KB
- MD5
  
  37e90e5549e60d3f2aa0c8ace3cdb160
- SHA1
  
  e0d23765dab23049458d3a27ae4afe881b068d4d
- SHA256
  
  8b58c6444087807c00b330ce0131da063dae77ca0efecd9003f9396ad04f36e0
- SHA512
  
  f76c845a496d8c167a1343148759f9c54031e61d74ed3d96174acd40b036939e883e82fc4a75f4237c536df7e3fb3bdd9d7f0f404aabd844f4b8be1f03ba9ddf
- SSDEEP
  
  3072:5+RGr/IKKNwhTPu3FwuBcpSf17iv83P8XybW:Awr/IK1PyZBYwGv83P8X3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence