0cae65441f968ddad9810fb7b7297c4b8790165f6a2483edca9f36d18511269f | Triage

Sharing

General

Target

93fe5b9280a2021d75b119d480a193e3_JaffaCakes118
Size

114KB
Sample

240813-vqym2awcqf
MD5

93fe5b9280a2021d75b119d480a193e3
SHA1

9f1742322192dcced4f057beb2c080b6ff6c8693
SHA256

0cae65441f968ddad9810fb7b7297c4b8790165f6a2483edca9f36d18511269f
SHA512

9999cd49a2005aaaa15aa5ad1a378f81e19ec5aaee4fab2d61bdb477329c72591195305715a7939437a1e9fcba2a4b0e1c3562c5cc8f3f4674e075b735371ddc
SSDEEP

3072:PoCMXP+f6FmxNTwNYFEB0M8tjWE+8xWuL:PoCc+f67NY6+M8t+8xWuL

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  93fe5b9280a2021d75b119d480a193e3_JaffaCakes118
- Size
  
  114KB
- MD5
  
  93fe5b9280a2021d75b119d480a193e3
- SHA1
  
  9f1742322192dcced4f057beb2c080b6ff6c8693
- SHA256
  
  0cae65441f968ddad9810fb7b7297c4b8790165f6a2483edca9f36d18511269f
- SHA512
  
  9999cd49a2005aaaa15aa5ad1a378f81e19ec5aaee4fab2d61bdb477329c72591195305715a7939437a1e9fcba2a4b0e1c3562c5cc8f3f4674e075b735371ddc
- SSDEEP
  
  3072:PoCMXP+f6FmxNTwNYFEB0M8tjWE+8xWuL:PoCc+f67NY6+M8t+8xWuL
Score

7^/10

discovery persistence
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence