01f8471b5baa722a8825377ba031baaf19328fb1e01e154d298a3bdbe5f21351 | Triage

Sharing

General

Target

67b59e779ca2cde9759fdbb3a4f76fd5_JaffaCakes118
Size

652KB
Sample

240723-qcva8svaka
MD5

67b59e779ca2cde9759fdbb3a4f76fd5
SHA1

283d6b3b56462a6f0d0fdb050d2844948d96ecdc
SHA256

01f8471b5baa722a8825377ba031baaf19328fb1e01e154d298a3bdbe5f21351
SHA512

4e2db78905e2f392e5219c729c21dd51e934102d2b21d7a79c4f43340e6c27d73a9a237e394b7bb30a2d4aecda971d92ed3ff91b3c1067339cf7f1df57c18dea
SSDEEP

12288:KIMWh8N44VA55J4NZphtIGSoA4TasL4Qfo2u8lp7d0dR+w653hvR/0055qV1:Kwc4H55J0ZpXae/fo2fl9dqy5ds

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  67b59e779ca2cde9759fdbb3a4f76fd5_JaffaCakes118
- Size
  
  652KB
- MD5
  
  67b59e779ca2cde9759fdbb3a4f76fd5
- SHA1
  
  283d6b3b56462a6f0d0fdb050d2844948d96ecdc
- SHA256
  
  01f8471b5baa722a8825377ba031baaf19328fb1e01e154d298a3bdbe5f21351
- SHA512
  
  4e2db78905e2f392e5219c729c21dd51e934102d2b21d7a79c4f43340e6c27d73a9a237e394b7bb30a2d4aecda971d92ed3ff91b3c1067339cf7f1df57c18dea
- SSDEEP
  
  12288:KIMWh8N44VA55J4NZphtIGSoA4TasL4Qfo2u8lp7d0dR+w653hvR/0055qV1:Kwc4H55J0ZpXae/fo2fl9dqy5ds
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence