4a4dc1e208fcf1dc456e76717504692ceb90230a98f358c8a43d34e7e2e1886d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

853234c3ad3d3bc8b85f1c0d2608504b_JaffaCakes118
Size

85KB
Sample

240810-hs93mathmb
MD5

853234c3ad3d3bc8b85f1c0d2608504b
SHA1

28c77f85ff599a6a953aa9010df8875e997d4f5a
SHA256

4a4dc1e208fcf1dc456e76717504692ceb90230a98f358c8a43d34e7e2e1886d
SHA512

afd1b0c55957c7823ba70b23cb4684be58b316d80e277486c5d66618aa11b7ee48456897aefd3a40d943002d73d6fc7b536fe7bdc2228fc3604f4e433c6e0ebb
SSDEEP

1536:weLyvcM7elmDwtS3CRh5tgMPERNCKqs3ifYX+rQEJcG:NL4ckJDTY6MPE3SsrX+06c

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  853234c3ad3d3bc8b85f1c0d2608504b_JaffaCakes118
- Size
  
  85KB
- MD5
  
  853234c3ad3d3bc8b85f1c0d2608504b
- SHA1
  
  28c77f85ff599a6a953aa9010df8875e997d4f5a
- SHA256
  
  4a4dc1e208fcf1dc456e76717504692ceb90230a98f358c8a43d34e7e2e1886d
- SHA512
  
  afd1b0c55957c7823ba70b23cb4684be58b316d80e277486c5d66618aa11b7ee48456897aefd3a40d943002d73d6fc7b536fe7bdc2228fc3604f4e433c6e0ebb
- SSDEEP
  
  1536:weLyvcM7elmDwtS3CRh5tgMPERNCKqs3ifYX+rQEJcG:NL4ckJDTY6MPE3SsrX+06c
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence