23994e3ed2d44b91c44ae7254b1f2161dda998c062dc7987d41767ec7e1f6764 | Triage

Sharing

General

Target

69ef8c27a922606fef1880bc627c387f_JaffaCakes118
Size

385KB
Sample

240724-c2kw7stbrn
MD5

69ef8c27a922606fef1880bc627c387f
SHA1

58c7543fb252bd107e7d42abf5b8fa1aaca51237
SHA256

23994e3ed2d44b91c44ae7254b1f2161dda998c062dc7987d41767ec7e1f6764
SHA512

8465f9049b46d16e2e7e8a739b91854df1c6805cfac9a4e96672ec30253237dc366da2dcc3cc7e6f1cf59309b6b45efdbedf8ac9b42cc6c6e2b3901e22da212b
SSDEEP

6144:8H2de5/nBuyjTX2LxyFC9SFr3Zl3432UrRAq8kYbo5lP:8D/4L05Jl3LUrMfbo

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  69ef8c27a922606fef1880bc627c387f_JaffaCakes118
- Size
  
  385KB
- MD5
  
  69ef8c27a922606fef1880bc627c387f
- SHA1
  
  58c7543fb252bd107e7d42abf5b8fa1aaca51237
- SHA256
  
  23994e3ed2d44b91c44ae7254b1f2161dda998c062dc7987d41767ec7e1f6764
- SHA512
  
  8465f9049b46d16e2e7e8a739b91854df1c6805cfac9a4e96672ec30253237dc366da2dcc3cc7e6f1cf59309b6b45efdbedf8ac9b42cc6c6e2b3901e22da212b
- SSDEEP
  
  6144:8H2de5/nBuyjTX2LxyFC9SFr3Zl3432UrRAq8kYbo5lP:8D/4L05Jl3LUrMfbo
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2