b9c711ff57885e901871a54d89d70076f5af69dae7d10149e067323d3fd3a646 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e98518306b6c868b545f4adac4bd37dd_JaffaCakes118
Size

104KB
Sample

240409-jwftmadd6v
MD5

e98518306b6c868b545f4adac4bd37dd
SHA1

0321e6e92efa39f627e7787ac4fa3db4e626596b
SHA256

b9c711ff57885e901871a54d89d70076f5af69dae7d10149e067323d3fd3a646
SHA512

46479ccedae079173f7bf1479657163e6af68258f4c390590344c98e23ae914b52e97d6c8ab5164273a861e4a3b473d8f484ba4b34a3917710f30fb92924cebd
SSDEEP

1536:iFQCaH3IAwxWvlkjMiTEFN4NCEgsT7B6JBDsF2J/OQZR3IAwxWvlL:zXXICluTEn4YsT7BTMJ//Z9IClL

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  e98518306b6c868b545f4adac4bd37dd_JaffaCakes118
- Size
  
  104KB
- MD5
  
  e98518306b6c868b545f4adac4bd37dd
- SHA1
  
  0321e6e92efa39f627e7787ac4fa3db4e626596b
- SHA256
  
  b9c711ff57885e901871a54d89d70076f5af69dae7d10149e067323d3fd3a646
- SHA512
  
  46479ccedae079173f7bf1479657163e6af68258f4c390590344c98e23ae914b52e97d6c8ab5164273a861e4a3b473d8f484ba4b34a3917710f30fb92924cebd
- SSDEEP
  
  1536:iFQCaH3IAwxWvlkjMiTEFN4NCEgsT7B6JBDsF2J/OQZR3IAwxWvlL:zXXICluTEn4YsT7BTMJ//Z9IClL
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence