b853a1af6a0a60095be2e010048fdbc575ab8e3fa010391bf6f9047ea2a14809 | Triage

Sharing

General

Target

01edfc8deea1b56fd6930db05a7dd293_JaffaCakes118
Size

186KB
Sample

240620-ckqq5ashke
MD5

01edfc8deea1b56fd6930db05a7dd293
SHA1

ed9ff4c19d14afbcefacd92005b47f78a279d69d
SHA256

b853a1af6a0a60095be2e010048fdbc575ab8e3fa010391bf6f9047ea2a14809
SHA512

7599f73090538b47ae0bb85a17096f6591ab720428cbce2746f4f01679e01952749d8ff8f91e1734b53e49eeb3deab86fa445cc4ee145162f508e5222c8d5d09
SSDEEP

3072:4rehbc1Oe4J2u4gVjS3cSIBLjJ1MbLrhQXzmZaDj//lAJP9wKaw:42cUe8zVjSvMMbL1af/CJVzaw

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  01edfc8deea1b56fd6930db05a7dd293_JaffaCakes118
- Size
  
  186KB
- MD5
  
  01edfc8deea1b56fd6930db05a7dd293
- SHA1
  
  ed9ff4c19d14afbcefacd92005b47f78a279d69d
- SHA256
  
  b853a1af6a0a60095be2e010048fdbc575ab8e3fa010391bf6f9047ea2a14809
- SHA512
  
  7599f73090538b47ae0bb85a17096f6591ab720428cbce2746f4f01679e01952749d8ff8f91e1734b53e49eeb3deab86fa445cc4ee145162f508e5222c8d5d09
- SSDEEP
  
  3072:4rehbc1Oe4J2u4gVjS3cSIBLjJ1MbLrhQXzmZaDj//lAJP9wKaw:42cUe8zVjSvMMbL1af/CJVzaw
Score

10^/10

evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies firewall policy service
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence