861a86d8deb2e334993e09825ac1df181a5aa3c714fed8cc32155a16a71cdd5c | Triage

Sharing

General

Target

4a9e4b153ab1bcde22b498abde466ca5_JaffaCakes118
Size

142KB
Sample

240516-mf821sga8x
MD5

4a9e4b153ab1bcde22b498abde466ca5
SHA1

9fa6be8c7ce0e5671592effa407572a4b93770b7
SHA256

861a86d8deb2e334993e09825ac1df181a5aa3c714fed8cc32155a16a71cdd5c
SHA512

0f55df581e41f86a82e5b4276cff71938e6b9d621a3f2020c997e784a4d7eb4a8cb74eb69dbaefe93df2d68b45167ac2efce61f22a1537d08b0ff952b63a19c1
SSDEEP

1536:WE1sdTxdrdL5txDCBOpJHxWk7WbOi25t9MUDaoHtqmNyfKcnUvmaj3au4S5EWRwX:ULTxNfECx9MUpNZNGUvmi3qS5EX4Lr

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4a9e4b153ab1bcde22b498abde466ca5_JaffaCakes118
- Size
  
  142KB
- MD5
  
  4a9e4b153ab1bcde22b498abde466ca5
- SHA1
  
  9fa6be8c7ce0e5671592effa407572a4b93770b7
- SHA256
  
  861a86d8deb2e334993e09825ac1df181a5aa3c714fed8cc32155a16a71cdd5c
- SHA512
  
  0f55df581e41f86a82e5b4276cff71938e6b9d621a3f2020c997e784a4d7eb4a8cb74eb69dbaefe93df2d68b45167ac2efce61f22a1537d08b0ff952b63a19c1
- SSDEEP
  
  1536:WE1sdTxdrdL5txDCBOpJHxWk7WbOi25t9MUDaoHtqmNyfKcnUvmaj3au4S5EWRwX:ULTxNfECx9MUpNZNGUvmi3qS5EX4Lr
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan