gh0strat | 74a05873f42435e0ec687132ebe8dba4e29c73d6788ee446b7244873fd1fa727 | Triage

Sharing

General

Target

JaffaCakes118_3dd3c0d8d2f898316ae7e7869750b260
Size

122KB
Sample

250302-exwh9avlw2
MD5

3dd3c0d8d2f898316ae7e7869750b260
SHA1

ae2ba17385ae8eb4259116f52cd936360175c2cb
SHA256

74a05873f42435e0ec687132ebe8dba4e29c73d6788ee446b7244873fd1fa727
SHA512

fe9530f6e2ef04bb90f54278997c8bcc190c2b1fc4705444ce7b3b3b51d059c67cefb979824746ca7985a4ee7cb6277f4b1ac5a67144f0e9be134769585c8005
SSDEEP

3072:of9xHwm1PXBmXZFeA28pM6EdePl9dehiv80P80Cnp8d6m:wdwaWB28edeP/deUv80P80Ap8p

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_3dd3c0d8d2f898316ae7e7869750b260
- Size
  
  122KB
- MD5
  
  3dd3c0d8d2f898316ae7e7869750b260
- SHA1
  
  ae2ba17385ae8eb4259116f52cd936360175c2cb
- SHA256
  
  74a05873f42435e0ec687132ebe8dba4e29c73d6788ee446b7244873fd1fa727
- SHA512
  
  fe9530f6e2ef04bb90f54278997c8bcc190c2b1fc4705444ce7b3b3b51d059c67cefb979824746ca7985a4ee7cb6277f4b1ac5a67144f0e9be134769585c8005
- SSDEEP
  
  3072:of9xHwm1PXBmXZFeA28pM6EdePl9dehiv80P80Cnp8d6m:wdwaWB28edeP/deUv80P80Ap8p
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence