68631627d2747e651071b9a791960702b4c4e9a7a8a9958b9751f9934f353089 | Triage

Sharing

General

Target

5a61f86a88fdcd68b86211d3ec64ebba_JaffaCakes118
Size

336KB
Sample

240719-eks8csvenc
MD5

5a61f86a88fdcd68b86211d3ec64ebba
SHA1

0391dc1ab61ae07cf76527eaf57f37a3ac01d7a2
SHA256

68631627d2747e651071b9a791960702b4c4e9a7a8a9958b9751f9934f353089
SHA512

dfc316bc40c5657e9a37a0c826699a9525b6e82a4cbcc7ffec7cf018734b32a3e691b9b2af25e717cee2677dadea4b8c579cf730c5299686270c5ed496b50175
SSDEEP

6144:ClPGCL8nbBv+CgyaDCYGwaSbntNggvSACuZde9Yr:YP5LuR+CarGYL7ayde

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  5a61f86a88fdcd68b86211d3ec64ebba_JaffaCakes118
- Size
  
  336KB
- MD5
  
  5a61f86a88fdcd68b86211d3ec64ebba
- SHA1
  
  0391dc1ab61ae07cf76527eaf57f37a3ac01d7a2
- SHA256
  
  68631627d2747e651071b9a791960702b4c4e9a7a8a9958b9751f9934f353089
- SHA512
  
  dfc316bc40c5657e9a37a0c826699a9525b6e82a4cbcc7ffec7cf018734b32a3e691b9b2af25e717cee2677dadea4b8c579cf730c5299686270c5ed496b50175
- SSDEEP
  
  6144:ClPGCL8nbBv+CgyaDCYGwaSbntNggvSACuZde9Yr:YP5LuR+CarGYL7ayde
Score

8^/10

evasion persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2