26bce9b211da37411a89d5903756333d65c6d91c31a6213f01f8fe6145f71ae3 | Triage

Sharing

General

Target

96b725f874159d60c08a082e5d791409_JaffaCakes118
Size

675KB
Sample

240814-thlsts1arh
MD5

96b725f874159d60c08a082e5d791409
SHA1

a0f367f65bc3ef9b66580a9f34924339015fed64
SHA256

26bce9b211da37411a89d5903756333d65c6d91c31a6213f01f8fe6145f71ae3
SHA512

d889160fc15f7bc950dc72c8e166d9298797350ca0b11ca1b043ae699c249d6b06d1b5e99a61891e5e0a28c55db398a19d749ef08a8d69545007b1ff7d26cece
SSDEEP

12288:kJ0p6T06/rm6agttTknjkxCdDLAvzVssNdIwxBhYQwlnYN:km6H/SSjMyvzVvIEBg5Y

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  96b725f874159d60c08a082e5d791409_JaffaCakes118
- Size
  
  675KB
- MD5
  
  96b725f874159d60c08a082e5d791409
- SHA1
  
  a0f367f65bc3ef9b66580a9f34924339015fed64
- SHA256
  
  26bce9b211da37411a89d5903756333d65c6d91c31a6213f01f8fe6145f71ae3
- SHA512
  
  d889160fc15f7bc950dc72c8e166d9298797350ca0b11ca1b043ae699c249d6b06d1b5e99a61891e5e0a28c55db398a19d749ef08a8d69545007b1ff7d26cece
- SSDEEP
  
  12288:kJ0p6T06/rm6agttTknjkxCdDLAvzVssNdIwxBhYQwlnYN:km6H/SSjMyvzVvIEBg5Y
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence