430dc3ea761120848443615af8d28b4b25ff66ae34cf4bfc244f29248deb6864 | Triage

Sharing

General

Target

2271b93e1ed53a994927834aa8dc6e2f_JaffaCakes118
Size

72KB
Sample

240703-p6mmtawfqe
MD5

2271b93e1ed53a994927834aa8dc6e2f
SHA1

194dc3552f5ffc31605f579fad19a60672d3d295
SHA256

430dc3ea761120848443615af8d28b4b25ff66ae34cf4bfc244f29248deb6864
SHA512

ccd7a4bd0673f64976d35368c10ef5de1cfb6f278ff1bde7550963b2bf636f4db0138fdb80ef06b40f34f251e0f152945e0a9a81d5deb3f1e46c6037b3a5b2f9
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2Q:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrs

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  2271b93e1ed53a994927834aa8dc6e2f_JaffaCakes118
- Size
  
  72KB
- MD5
  
  2271b93e1ed53a994927834aa8dc6e2f
- SHA1
  
  194dc3552f5ffc31605f579fad19a60672d3d295
- SHA256
  
  430dc3ea761120848443615af8d28b4b25ff66ae34cf4bfc244f29248deb6864
- SHA512
  
  ccd7a4bd0673f64976d35368c10ef5de1cfb6f278ff1bde7550963b2bf636f4db0138fdb80ef06b40f34f251e0f152945e0a9a81d5deb3f1e46c6037b3a5b2f9
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2Q:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrs
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2