233635e08bb05eddb024bab757438117de101e029f6304e9a8c6e8284b820aee | Triage

Sharing

General

Target

0358b0d0c80d5e014d02f160cac4cdcf_JaffaCakes118
Size

72KB
Sample

240620-gfvlqswglp
MD5

0358b0d0c80d5e014d02f160cac4cdcf
SHA1

d7b3ae5069013803e1d15a9fe8f93d721b015c9f
SHA256

233635e08bb05eddb024bab757438117de101e029f6304e9a8c6e8284b820aee
SHA512

3fa2b328340c660df7692fc832303cd6a638091f28ee1827aef0499b5542e4f37fb72e045fdb46fa21e47c4ce84dd50a215b3237e6e5cb3b918ea12535cf6e92
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2o:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrU

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  0358b0d0c80d5e014d02f160cac4cdcf_JaffaCakes118
- Size
  
  72KB
- MD5
  
  0358b0d0c80d5e014d02f160cac4cdcf
- SHA1
  
  d7b3ae5069013803e1d15a9fe8f93d721b015c9f
- SHA256
  
  233635e08bb05eddb024bab757438117de101e029f6304e9a8c6e8284b820aee
- SHA512
  
  3fa2b328340c660df7692fc832303cd6a638091f28ee1827aef0499b5542e4f37fb72e045fdb46fa21e47c4ce84dd50a215b3237e6e5cb3b918ea12535cf6e92
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2o:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrU
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2