0914eac991468bbfa7bc0f91f89f8790de939377e32e1b64372966ede0a81158

Resubmissions

20/04/2024, 09:25

240420-ldx2asea5z 10

20/04/2024, 09:22

20/04/2024, 09:19

20/04/2024, 09:14

20/04/2024, 08:58

Sharing

Copy URL

Twitter E-mail

General

Target

fc640588caf6ae0bbbafba110713811c_JaffaCakes118
Size

95KB
Sample

240420-k7b59adg9t
MD5

fc640588caf6ae0bbbafba110713811c
SHA1

6c51a5f06482e189f469869b54ca0652729b79ed
SHA256

0914eac991468bbfa7bc0f91f89f8790de939377e32e1b64372966ede0a81158
SHA512

f0c03fc26d5863ed89583ccae9e0b153242df3e2848b376bd94ddbe972763aaa71f151572835d732272d551511b4606ccf90bf379740b654fd90c52055041452
SSDEEP

1536:czudrMAvKsoVGpSx7ACozxWNTdQWkWveFxQldU8N7JmYnY8ju/BjY+9pterksj4c:jdrMAvRoV4SxU5SOapqwY8kYuulsi

Score

10^/10

Malware Config

Targets

- Target
  
  fc640588caf6ae0bbbafba110713811c_JaffaCakes118
- Size
  
  95KB
- MD5
  
  fc640588caf6ae0bbbafba110713811c
- SHA1
  
  6c51a5f06482e189f469869b54ca0652729b79ed
- SHA256
  
  0914eac991468bbfa7bc0f91f89f8790de939377e32e1b64372966ede0a81158
- SHA512
  
  f0c03fc26d5863ed89583ccae9e0b153242df3e2848b376bd94ddbe972763aaa71f151572835d732272d551511b4606ccf90bf379740b654fd90c52055041452
- SSDEEP
  
  1536:czudrMAvKsoVGpSx7ACozxWNTdQWkWveFxQldU8N7JmYnY8ju/BjY+9pterksj4c:jdrMAvRoV4SxU5SOapqwY8kYuulsi
Score

10^/10

evasion persistence ransomware trojan
- Windows security bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Modifies Shared Task Scheduler registry keys
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Windows security bypass

Disables RegEdit via registry modification

Disables Task Manager via registry modification

Modifies Shared Task Scheduler registry keys

Executes dropped EXE

Loads dropped DLL

Windows security modification

Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2