gh0strat | 1ceb071112f5c4c49f8a06451de876e322c666569ab39ca7e5b5562437235ea5 | Triage

Sharing

General

Target

JaffaCakes118_6319d966d2920daf3c7c15c6992de141
Size

114KB
Sample

250311-em6lgazrt8
MD5

6319d966d2920daf3c7c15c6992de141
SHA1

2cf7ddc412d9b363a422fc6ca40df495ba2e20d8
SHA256

1ceb071112f5c4c49f8a06451de876e322c666569ab39ca7e5b5562437235ea5
SHA512

5893e36cbc10ab27d0bfdcd2276c7189e0b4e76bc8ae10a5f5b170d420e2079eed9a6858839f70b6ce94b77ca978dc5b5860ef3ef49536f1aa7306fac3ebbcb1
SSDEEP

3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KJiCbmN:Mpl2GkGMkSgb8Svlu5KJON

Score

10^/10

gh0strat discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_6319d966d2920daf3c7c15c6992de141
- Size
  
  114KB
- MD5
  
  6319d966d2920daf3c7c15c6992de141
- SHA1
  
  2cf7ddc412d9b363a422fc6ca40df495ba2e20d8
- SHA256
  
  1ceb071112f5c4c49f8a06451de876e322c666569ab39ca7e5b5562437235ea5
- SHA512
  
  5893e36cbc10ab27d0bfdcd2276c7189e0b4e76bc8ae10a5f5b170d420e2079eed9a6858839f70b6ce94b77ca978dc5b5860ef3ef49536f1aa7306fac3ebbcb1
- SSDEEP
  
  3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KJiCbmN:Mpl2GkGMkSgb8Svlu5KJON
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence