gh0strat | 6f4df3cebdfc44034df366ae7901fbfbb2cf08fb74f2a8ed1a6c87b546717d83 | Triage

Sharing

General

Target

JaffaCakes118_5345048a91a841d072166d50bf3c5dcf
Size

544KB
Sample

250305-xt9ktawwfv
MD5

5345048a91a841d072166d50bf3c5dcf
SHA1

88cf6eb2c3614f46f9109341c6a770bc1d8f6737
SHA256

6f4df3cebdfc44034df366ae7901fbfbb2cf08fb74f2a8ed1a6c87b546717d83
SHA512

9194fee717bdb819a7db9d0bc57b7064d77a7c9125477c4218f5c9de9026dcca7b530a2ce95f59750841899e6eec9df0450485c3e87866caff15f1d34dc1373c
SSDEEP

6144:ciTti+B0bL7t4A5gp34BEF4G7v4G7AWFUHp4G7AWFkW7:bPB0bd4AgNikJATA8

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_5345048a91a841d072166d50bf3c5dcf
- Size
  
  544KB
- MD5
  
  5345048a91a841d072166d50bf3c5dcf
- SHA1
  
  88cf6eb2c3614f46f9109341c6a770bc1d8f6737
- SHA256
  
  6f4df3cebdfc44034df366ae7901fbfbb2cf08fb74f2a8ed1a6c87b546717d83
- SHA512
  
  9194fee717bdb819a7db9d0bc57b7064d77a7c9125477c4218f5c9de9026dcca7b530a2ce95f59750841899e6eec9df0450485c3e87866caff15f1d34dc1373c
- SSDEEP
  
  6144:ciTti+B0bL7t4A5gp34BEF4G7v4G7AWFUHp4G7AWFkW7:bPB0bd4AgNikJATA8
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence