7f0162d3b1e0d5f372c8cb260c5479b49ff6ef8f5c93cfd024c1ee4dd5714a4d | Triage

Sharing

General

Target

083aabe5c6f11cf5f022de6d5bc6076d_JaffaCakes118
Size

163KB
Sample

241002-bqy41stera
MD5

083aabe5c6f11cf5f022de6d5bc6076d
SHA1

8eaecf49bf5fa04169e9d4a94f8c111a3d807274
SHA256

7f0162d3b1e0d5f372c8cb260c5479b49ff6ef8f5c93cfd024c1ee4dd5714a4d
SHA512

980e70692e72d45e85652aee0330d2dffa5ae1083173b32c5097b9c1605292b7007e7f073bd5aa1da1c5da76e223438fd6635aaed3272c94ece15c979946397f
SSDEEP

3072:NH9Wre6TQMl8nN7P7A10ecvyhDYiphH5FR:WiaAD7DZahDYmz

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  083aabe5c6f11cf5f022de6d5bc6076d_JaffaCakes118
- Size
  
  163KB
- MD5
  
  083aabe5c6f11cf5f022de6d5bc6076d
- SHA1
  
  8eaecf49bf5fa04169e9d4a94f8c111a3d807274
- SHA256
  
  7f0162d3b1e0d5f372c8cb260c5479b49ff6ef8f5c93cfd024c1ee4dd5714a4d
- SHA512
  
  980e70692e72d45e85652aee0330d2dffa5ae1083173b32c5097b9c1605292b7007e7f073bd5aa1da1c5da76e223438fd6635aaed3272c94ece15c979946397f
- SSDEEP
  
  3072:NH9Wre6TQMl8nN7P7A10ecvyhDYiphH5FR:WiaAD7DZahDYmz
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence