1b214c1a5827646401610041f79ec92976e3be83fc5c040cc2f789130f712f6a | Triage

Sharing

General

Target

96efbd9b1bcd0a74ee0a6d8998f66a28_JaffaCakes118
Size

162KB
Sample

240814-vqpecstdkf
MD5

96efbd9b1bcd0a74ee0a6d8998f66a28
SHA1

c1f538645108c08403f098144c76421a17b23456
SHA256

1b214c1a5827646401610041f79ec92976e3be83fc5c040cc2f789130f712f6a
SHA512

9650944d17bd43555ce8bc9288fbdcfa0e1dc0a4ac50ee893bf905e3a519911ed8b2451092e493894535716234a4e8285c791912de2960d1c7a52494320c601a
SSDEEP

3072:RLvWMlaTQl1bS668z1C6srTgBDQhxPhH5lwL:A25m58zJscBDQh3T

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  96efbd9b1bcd0a74ee0a6d8998f66a28_JaffaCakes118
- Size
  
  162KB
- MD5
  
  96efbd9b1bcd0a74ee0a6d8998f66a28
- SHA1
  
  c1f538645108c08403f098144c76421a17b23456
- SHA256
  
  1b214c1a5827646401610041f79ec92976e3be83fc5c040cc2f789130f712f6a
- SHA512
  
  9650944d17bd43555ce8bc9288fbdcfa0e1dc0a4ac50ee893bf905e3a519911ed8b2451092e493894535716234a4e8285c791912de2960d1c7a52494320c601a
- SSDEEP
  
  3072:RLvWMlaTQl1bS668z1C6srTgBDQhxPhH5lwL:A25m58zJscBDQh3T
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence