d88b7e4f98dcde97d4aca7f3db5475270319e522c7d6f46e7df11cdd84b8fd10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

822a7359aada30db7c00c0cd1e4e2518_JaffaCakes118
Size

320KB
Sample

240801-3h9z4axbpf
MD5

822a7359aada30db7c00c0cd1e4e2518
SHA1

5b5188504a10023b163862b10f307ae22201f115
SHA256

d88b7e4f98dcde97d4aca7f3db5475270319e522c7d6f46e7df11cdd84b8fd10
SHA512

9ff0a66ba46174bccdf2c8b3d324288bc8a682ed09b667d27a3f3f18799041f03c744fd446cc51134e5672ce893da2b55fece607d47900481fddd1efc8b4ac67
SSDEEP

6144:wf9spTEkIl6pzL/erEDj23rd1lds6jybRS4y/EVLn88BJ0Wi0OBU:CSpO6N/erk23rvjybRfXVLn1n0Wi

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  822a7359aada30db7c00c0cd1e4e2518_JaffaCakes118
- Size
  
  320KB
- MD5
  
  822a7359aada30db7c00c0cd1e4e2518
- SHA1
  
  5b5188504a10023b163862b10f307ae22201f115
- SHA256
  
  d88b7e4f98dcde97d4aca7f3db5475270319e522c7d6f46e7df11cdd84b8fd10
- SHA512
  
  9ff0a66ba46174bccdf2c8b3d324288bc8a682ed09b667d27a3f3f18799041f03c744fd446cc51134e5672ce893da2b55fece607d47900481fddd1efc8b4ac67
- SSDEEP
  
  6144:wf9spTEkIl6pzL/erEDj23rd1lds6jybRS4y/EVLn88BJ0Wi0OBU:CSpO6N/erk23rvjybRfXVLn1n0Wi
Score

8^/10

discovery evasion persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2