gh0strat | 883ebe97dd59f17235c08dcfb4431963ef2c50c0ab2cb53591d490ea095da5c5 | Triage

Sharing

General

Target

JaffaCakes118_5d51d749bd50bdfb08ca61c88818b570
Size

122KB
Sample

250310-f8ewbat1cs
MD5

5d51d749bd50bdfb08ca61c88818b570
SHA1

74643213faec1d2764e7ff6be4eb6c0f32bcff63
SHA256

883ebe97dd59f17235c08dcfb4431963ef2c50c0ab2cb53591d490ea095da5c5
SHA512

4441ca12ff824ce753dff330501d5d86fca15736294eae314d6af995c9f379c4926544e3a59da9e2e495d1c40f2fc341d21280a4c856c946265b05d3c4b083b4
SSDEEP

3072:of9xHwm1PXBmXZFeA28pMGEdePl9dehiv80P80Cnp8d6a:wdwaWB28adeP/deUv80P80Ap8h

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_5d51d749bd50bdfb08ca61c88818b570
- Size
  
  122KB
- MD5
  
  5d51d749bd50bdfb08ca61c88818b570
- SHA1
  
  74643213faec1d2764e7ff6be4eb6c0f32bcff63
- SHA256
  
  883ebe97dd59f17235c08dcfb4431963ef2c50c0ab2cb53591d490ea095da5c5
- SHA512
  
  4441ca12ff824ce753dff330501d5d86fca15736294eae314d6af995c9f379c4926544e3a59da9e2e495d1c40f2fc341d21280a4c856c946265b05d3c4b083b4
- SSDEEP
  
  3072:of9xHwm1PXBmXZFeA28pMGEdePl9dehiv80P80Cnp8d6a:wdwaWB28adeP/deUv80P80Ap8h
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence