29d9112141942b8d398e4a8013061e409af130412b3f886ae5a42d12d6526738 | Triage

Sharing

General

Target

81c99e9f40b36b9f8201bf47b974b087_JaffaCakes118
Size

79KB
Sample

240801-1bjhfswhjq
MD5

81c99e9f40b36b9f8201bf47b974b087
SHA1

8454764e151bf8622541abd7f608e69dea701e30
SHA256

29d9112141942b8d398e4a8013061e409af130412b3f886ae5a42d12d6526738
SHA512

af1c1b61395f455b07d95bef1b308af9fc6e3266fc720fd0eea02220165b4304f81ade119badd3ff77e48710d0bb421fcd26801ec0090fc599e34c8c9432d1f8
SSDEEP

1536:vbJUWIcJuPQWr5B/lAMG83RheVPGSFPT:jSWIpr5BnhIFF7

Score

8^/10

discovery evasion execution persistence

Malware Config

Targets

- Target
  
  81c99e9f40b36b9f8201bf47b974b087_JaffaCakes118
- Size
  
  79KB
- MD5
  
  81c99e9f40b36b9f8201bf47b974b087
- SHA1
  
  8454764e151bf8622541abd7f608e69dea701e30
- SHA256
  
  29d9112141942b8d398e4a8013061e409af130412b3f886ae5a42d12d6526738
- SHA512
  
  af1c1b61395f455b07d95bef1b308af9fc6e3266fc720fd0eea02220165b4304f81ade119badd3ff77e48710d0bb421fcd26801ec0090fc599e34c8c9432d1f8
- SSDEEP
  
  1536:vbJUWIcJuPQWr5B/lAMG83RheVPGSFPT:jSWIpr5BnhIFF7
Score

8^/10

discovery evasion execution persistence
- Stops running service(s)
  evasion execution
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistence

behavioral2

discoveryevasionexecutionpersistence