6de34bc98ea9fcbffd71cec5a8f27d5be72be4be66a02901ab50ebba41966074 | Triage

Sharing

General

Target

7f54ce5d333ece9d5ab0a9da00f3bbd6_JaffaCakes118
Size

239KB
Sample

240529-dt3bysge5x
MD5

7f54ce5d333ece9d5ab0a9da00f3bbd6
SHA1

ff86448a5bf56096395137d7c69551a2cca52cb1
SHA256

6de34bc98ea9fcbffd71cec5a8f27d5be72be4be66a02901ab50ebba41966074
SHA512

713f35072d2009d6fd172570075b54491f360240b0c6f9405e2e4cb196a7f5949b15d1a8b834a023afb6419654a775019735a6e61cf080276b94b8d9d1dbefb4
SSDEEP

3072:qTVVT0gg95XtpbjVOdeFdeLHE0jiNFxxr5tYE3cxDwcrtfx:YTBO5tpFOydeLpjiNDxHn3cRfVx

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  7f54ce5d333ece9d5ab0a9da00f3bbd6_JaffaCakes118
- Size
  
  239KB
- MD5
  
  7f54ce5d333ece9d5ab0a9da00f3bbd6
- SHA1
  
  ff86448a5bf56096395137d7c69551a2cca52cb1
- SHA256
  
  6de34bc98ea9fcbffd71cec5a8f27d5be72be4be66a02901ab50ebba41966074
- SHA512
  
  713f35072d2009d6fd172570075b54491f360240b0c6f9405e2e4cb196a7f5949b15d1a8b834a023afb6419654a775019735a6e61cf080276b94b8d9d1dbefb4
- SSDEEP
  
  3072:qTVVT0gg95XtpbjVOdeFdeLHE0jiNFxxr5tYE3cxDwcrtfx:YTBO5tpFOydeLpjiNDxHn3cRfVx
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan