gh0strat | fef623df64d7686836c7baf57390479034bb97859644894b36942dd260713195 | Triage

Sharing

General

Target

JaffaCakes118_4434fadc1dd4bbef4cf1bf21bff4087d
Size

120KB
Sample

250303-c8vd8atzdz
MD5

4434fadc1dd4bbef4cf1bf21bff4087d
SHA1

141c1de5e37b488e5cfe4e94a7f195a9da108006
SHA256

fef623df64d7686836c7baf57390479034bb97859644894b36942dd260713195
SHA512

977499bcdefa47f1ff0200b30bceffcde3d23d74e45628c2f6b9f55efb3d3da89bea14cc8d9d4b1dff700bf23466e0a2914f5a2c02e6b7e4f458e25262d55d17
SSDEEP

3072:IDIast3bUlE+eFnCzURm3eqgAjUWinJnbMyDH:IgRlnQteqgA1qoyr

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_4434fadc1dd4bbef4cf1bf21bff4087d
- Size
  
  120KB
- MD5
  
  4434fadc1dd4bbef4cf1bf21bff4087d
- SHA1
  
  141c1de5e37b488e5cfe4e94a7f195a9da108006
- SHA256
  
  fef623df64d7686836c7baf57390479034bb97859644894b36942dd260713195
- SHA512
  
  977499bcdefa47f1ff0200b30bceffcde3d23d74e45628c2f6b9f55efb3d3da89bea14cc8d9d4b1dff700bf23466e0a2914f5a2c02e6b7e4f458e25262d55d17
- SSDEEP
  
  3072:IDIast3bUlE+eFnCzURm3eqgAjUWinJnbMyDH:IgRlnQteqgA1qoyr
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence