a714c2806f81699ee34724b89f5a33c35ce8e1988c98492cd125ec7fae2932d4 | Triage

Sharing

General

Target

6853ce9c7809878d2c43b55ab7bea3d9_JaffaCakes118
Size

91KB
Sample

240522-xy2qrsdc8t
MD5

6853ce9c7809878d2c43b55ab7bea3d9
SHA1

1b5498e69666c89285474493b799324948c06c47
SHA256

a714c2806f81699ee34724b89f5a33c35ce8e1988c98492cd125ec7fae2932d4
SHA512

b917b2dddda9bd2bbb8f8cb0fde79fd8eb5416ea90c1fac5c08d97a29971dffe067ceb7bf54702eec7cc7ca9b0c81c0f28d128e7c85e68f338405396020fa407
SSDEEP

1536:Tr7ftfkS5g9YOms+gZcQipICdXkNDqLLZX9lItVGL++eIOlnToIfVwgl3X:TnFfHgTWmCRkGbKGLeNTBfVN

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  6853ce9c7809878d2c43b55ab7bea3d9_JaffaCakes118
- Size
  
  91KB
- MD5
  
  6853ce9c7809878d2c43b55ab7bea3d9
- SHA1
  
  1b5498e69666c89285474493b799324948c06c47
- SHA256
  
  a714c2806f81699ee34724b89f5a33c35ce8e1988c98492cd125ec7fae2932d4
- SHA512
  
  b917b2dddda9bd2bbb8f8cb0fde79fd8eb5416ea90c1fac5c08d97a29971dffe067ceb7bf54702eec7cc7ca9b0c81c0f28d128e7c85e68f338405396020fa407
- SSDEEP
  
  1536:Tr7ftfkS5g9YOms+gZcQipICdXkNDqLLZX9lItVGL++eIOlnToIfVwgl3X:TnFfHgTWmCRkGbKGLeNTBfVN
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Modifies security service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2