74f0bb272728ada75890501eb1d79d3a48e772da6d803328046dbca1e0224d40 | Triage

Sharing

General

Target

51d6028a5b5c744d0506810950cff00e_JaffaCakes118
Size

254KB
Sample

240517-2kgwnaeh23
MD5

51d6028a5b5c744d0506810950cff00e
SHA1

c2d855fa7c2ab6ec2d8399733747869a131c2c2a
SHA256

74f0bb272728ada75890501eb1d79d3a48e772da6d803328046dbca1e0224d40
SHA512

b47aaa98a74122c0c3b6da3acf544c8336961952fcbb2974e8d027273e31e2afc0d516bc01b72b80f12a58b3c644cc7135d426aecb2576d83952a70a86a8ca43
SSDEEP

6144:sZJt+EA3kZL+lUf44BgE+4MLzuT3V6Vg:sZJt+EAsYUg4m1BLyhL

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  51d6028a5b5c744d0506810950cff00e_JaffaCakes118
- Size
  
  254KB
- MD5
  
  51d6028a5b5c744d0506810950cff00e
- SHA1
  
  c2d855fa7c2ab6ec2d8399733747869a131c2c2a
- SHA256
  
  74f0bb272728ada75890501eb1d79d3a48e772da6d803328046dbca1e0224d40
- SHA512
  
  b47aaa98a74122c0c3b6da3acf544c8336961952fcbb2974e8d027273e31e2afc0d516bc01b72b80f12a58b3c644cc7135d426aecb2576d83952a70a86a8ca43
- SSDEEP
  
  6144:sZJt+EA3kZL+lUf44BgE+4MLzuT3V6Vg:sZJt+EAsYUg4m1BLyhL
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan