d5c2799d2812fdfb23bfa10aa50cbde07590632ec0aafb4f0061279e71594f63 | Triage

Sharing

General

Target

31916bb6bab63dceca62b30540c8cc82_JaffaCakes118
Size

119KB
Sample

240510-3edgqafg9z
MD5

31916bb6bab63dceca62b30540c8cc82
SHA1

564b81e56d73e2da75e752115cf0a1f3f01997a3
SHA256

d5c2799d2812fdfb23bfa10aa50cbde07590632ec0aafb4f0061279e71594f63
SHA512

4ae8ffa56c50896e7f09607b59341162fbbe8d58c812dea6cda781bd0183ad007fc22e90fb4513accafaed776e15fb8e7d35450c17dee44516a1877b4d7eb0cf
SSDEEP

1536:ojqQukmLkY/vO74BzIAS/B9SQzebQcMxVOUrt8t+MYYogwi+67Rw:oLhWkYZvSHbz4MNt8t+eogd+6lw

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  31916bb6bab63dceca62b30540c8cc82_JaffaCakes118
- Size
  
  119KB
- MD5
  
  31916bb6bab63dceca62b30540c8cc82
- SHA1
  
  564b81e56d73e2da75e752115cf0a1f3f01997a3
- SHA256
  
  d5c2799d2812fdfb23bfa10aa50cbde07590632ec0aafb4f0061279e71594f63
- SHA512
  
  4ae8ffa56c50896e7f09607b59341162fbbe8d58c812dea6cda781bd0183ad007fc22e90fb4513accafaed776e15fb8e7d35450c17dee44516a1877b4d7eb0cf
- SSDEEP
  
  1536:ojqQukmLkY/vO74BzIAS/B9SQzebQcMxVOUrt8t+MYYogwi+67Rw:oLhWkYZvSHbz4MNt8t+eogd+6lw
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence