12a4210df98701d86ddccdb0a4626ca4f563e3171b4aeb87578a2278a6352921 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

772cc472b6b0312cee6565906311b60c_JaffaCakes118
Size

64KB
Sample

240727-gmzh9szhnk
MD5

772cc472b6b0312cee6565906311b60c
SHA1

e788278f514be1e86b0d76ac83ff0cdd1ceb5757
SHA256

12a4210df98701d86ddccdb0a4626ca4f563e3171b4aeb87578a2278a6352921
SHA512

616e8699789f1def4438509fa0eeacefd6c68b9ec62a39d4d4400871092b628557bf8bc46435248527fe39597f04f29322c0d049b9da668a8ffe0cfac633b26d
SSDEEP

1536:kCKoLD+h/84UimkdxMLVF8JSYyX7jl1isKldZ8:kCKomy45ZSF8yVCd8

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  772cc472b6b0312cee6565906311b60c_JaffaCakes118
- Size
  
  64KB
- MD5
  
  772cc472b6b0312cee6565906311b60c
- SHA1
  
  e788278f514be1e86b0d76ac83ff0cdd1ceb5757
- SHA256
  
  12a4210df98701d86ddccdb0a4626ca4f563e3171b4aeb87578a2278a6352921
- SHA512
  
  616e8699789f1def4438509fa0eeacefd6c68b9ec62a39d4d4400871092b628557bf8bc46435248527fe39597f04f29322c0d049b9da668a8ffe0cfac633b26d
- SSDEEP
  
  1536:kCKoLD+h/84UimkdxMLVF8JSYyX7jl1isKldZ8:kCKomy45ZSF8yVCd8
Score

10^/10

discovery persistence evasion
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoveryevasion