59a7515aab03e39e775c53b29e89afcfc2287324f2e6fbe6d23fc91f149f612d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d57ff49439aaf907aad61a4d3e05d29f_JaffaCakes118
Size

143KB
Sample

240909-cqa8mawhnn
MD5

d57ff49439aaf907aad61a4d3e05d29f
SHA1

cf24a434a3f13fa07df80e8711647769abed0e29
SHA256

59a7515aab03e39e775c53b29e89afcfc2287324f2e6fbe6d23fc91f149f612d
SHA512

49d56115fee6b37d8358a0e07b5b42c812e4e1993b0eac5d6df9e3b28ae4a5793dfa9ae560f92117c2a7c98646c74c3d3274096a739064f75f685863ac909fc2
SSDEEP

3072:NbRVWzcmdg/rrrrrrrWrrrMrr9rrrrorrrrorrrr5rrrryrrrrrCrrrrrtrkrrrs:HVQcmdgJov0aEYRfvM

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d57ff49439aaf907aad61a4d3e05d29f_JaffaCakes118
- Size
  
  143KB
- MD5
  
  d57ff49439aaf907aad61a4d3e05d29f
- SHA1
  
  cf24a434a3f13fa07df80e8711647769abed0e29
- SHA256
  
  59a7515aab03e39e775c53b29e89afcfc2287324f2e6fbe6d23fc91f149f612d
- SHA512
  
  49d56115fee6b37d8358a0e07b5b42c812e4e1993b0eac5d6df9e3b28ae4a5793dfa9ae560f92117c2a7c98646c74c3d3274096a739064f75f685863ac909fc2
- SSDEEP
  
  3072:NbRVWzcmdg/rrrrrrrWrrrMrr9rrrrorrrrorrrr5rrrryrrrrrCrrrrrtrkrrrs:HVQcmdgJov0aEYRfvM
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence