23c7ba39d53c433d6b7d28b3986dca145be4391e39541a922617cc8aea86b2a8 | Triage

Sharing

General

Target

JaffaCakes118_b2f5f261835390a2fa475d66bf033d80
Size

340KB
Sample

250412-3xegqstn12
MD5

b2f5f261835390a2fa475d66bf033d80
SHA1

efd52b776f2e0500e2a4fe9d37ff800b9a81f6b5
SHA256

23c7ba39d53c433d6b7d28b3986dca145be4391e39541a922617cc8aea86b2a8
SHA512

eb44bde9c0f604ed5bf4e4dbe7b80e65c3af567db3186d59e9bf7af89a775c7adb4b4073202d6775cc444e4566b9dd33cb8a75ac3a0fb3042af546a702679c3f
SSDEEP

6144:mGooGzCqO4g24u+Qz5WSFx39oZb1dL/WhN:rGzBa24JMLando

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_b2f5f261835390a2fa475d66bf033d80
- Size
  
  340KB
- MD5
  
  b2f5f261835390a2fa475d66bf033d80
- SHA1
  
  efd52b776f2e0500e2a4fe9d37ff800b9a81f6b5
- SHA256
  
  23c7ba39d53c433d6b7d28b3986dca145be4391e39541a922617cc8aea86b2a8
- SHA512
  
  eb44bde9c0f604ed5bf4e4dbe7b80e65c3af567db3186d59e9bf7af89a775c7adb4b4073202d6775cc444e4566b9dd33cb8a75ac3a0fb3042af546a702679c3f
- SSDEEP
  
  6144:mGooGzCqO4g24u+Qz5WSFx39oZb1dL/WhN:rGzBa24JMLando
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence