gh0strat | 1d40ac27d6136886f952b42c7ddeacd7ff8974376dad3776462de7c3fcebbcf0 | Triage

Sharing

General

Target

JaffaCakes118_41b68187bdf4d13f1cdb3d580662b6f6
Size

488KB
Sample

250302-wh8cyazrz7
MD5

41b68187bdf4d13f1cdb3d580662b6f6
SHA1

b7044fd6c58392f6530e6ef5629a08949b6e6508
SHA256

1d40ac27d6136886f952b42c7ddeacd7ff8974376dad3776462de7c3fcebbcf0
SHA512

b3e02be9d0748b0a72e9ab71501e7086bae67ababa47f91857373bb94c16ba9583e131cd323e0eccc15a691cd2e141e7b193fe47d008b0a507a42b1d6bee3d3a
SSDEEP

12288:JPZTKEZVQQxfnr+TK7r79/ZzrW+Vc2O1dkijFM5xYz:JPZTpVQQxfnr+TK7r79/ZzBV7OTkKFMM

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_41b68187bdf4d13f1cdb3d580662b6f6
- Size
  
  488KB
- MD5
  
  41b68187bdf4d13f1cdb3d580662b6f6
- SHA1
  
  b7044fd6c58392f6530e6ef5629a08949b6e6508
- SHA256
  
  1d40ac27d6136886f952b42c7ddeacd7ff8974376dad3776462de7c3fcebbcf0
- SHA512
  
  b3e02be9d0748b0a72e9ab71501e7086bae67ababa47f91857373bb94c16ba9583e131cd323e0eccc15a691cd2e141e7b193fe47d008b0a507a42b1d6bee3d3a
- SSDEEP
  
  12288:JPZTKEZVQQxfnr+TK7r79/ZzrW+Vc2O1dkijFM5xYz:JPZTpVQQxfnr+TK7r79/ZzBV7OTkKFMM
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence