Overview

overview

7

Static

static

3

6d62c67988...18.exe

windows7-x64

7

6d62c67988...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d62c67988a215c5479a4b5667c0cf18_JaffaCakes118

  • Size

    877KB

  • Sample

    240524-fgqthaea6w

  • MD5

    6d62c67988a215c5479a4b5667c0cf18

  • SHA1

    c6e124a3c4fde2bbca5d013a84d5a9e4389bdc24

  • SHA256

    127f3d026d2a0d1a050c49ca25438d90616bb5af4b6483fe167d0b1a1c0613aa

  • SHA512

    7f652720d967926245970475c95a802028c46c3efe35e5137cab82ba91eb5f63cc3c12c36904dfc30dde0eb6da86a24ce7c0970b08ac86e6b0937761edb7afc2

  • SSDEEP

    24576:y5eyg8XUwEA4MS5g0dYxVJZIVxm253E2rpyRviq:KdgYQR5g0MnZ0E1+Nq

Score
7/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      6d62c67988a215c5479a4b5667c0cf18_JaffaCakes118

    • Size

      877KB

    • MD5

      6d62c67988a215c5479a4b5667c0cf18

    • SHA1

      c6e124a3c4fde2bbca5d013a84d5a9e4389bdc24

    • SHA256

      127f3d026d2a0d1a050c49ca25438d90616bb5af4b6483fe167d0b1a1c0613aa

    • SHA512

      7f652720d967926245970475c95a802028c46c3efe35e5137cab82ba91eb5f63cc3c12c36904dfc30dde0eb6da86a24ce7c0970b08ac86e6b0937761edb7afc2

    • SSDEEP

      24576:y5eyg8XUwEA4MS5g0dYxVJZIVxm253E2rpyRviq:KdgYQR5g0MnZ0E1+Nq

    Score
    7/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks