c166886af3a9f84dd2d92c097d7fa6eecf11125e0875ca49f0e33b922d11ddd5 | Triage

Sharing

General

Target

88e02f4ea19c8b1d3869f34319feeecc_JaffaCakes118
Size

474KB
Sample

240811-eckk9axfrd
MD5

88e02f4ea19c8b1d3869f34319feeecc
SHA1

51d50c786a27983f1be0b45f6db947a7452d955e
SHA256

c166886af3a9f84dd2d92c097d7fa6eecf11125e0875ca49f0e33b922d11ddd5
SHA512

654c5a9acf495f3d9f81629953e5ee5ad8ebb37532d128b35d30ff003cbea49c76df290aca977d6b3767aea27b128b4533618e8591628af3da4493321f4b3bc6
SSDEEP

12288:ZofvXDQUb7t2r2GKyLAaPEq2kJSKObLEXbEMd4L5mSG:ZoDQUb7t2rtAaPD2gXJuL8x

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  88e02f4ea19c8b1d3869f34319feeecc_JaffaCakes118
- Size
  
  474KB
- MD5
  
  88e02f4ea19c8b1d3869f34319feeecc
- SHA1
  
  51d50c786a27983f1be0b45f6db947a7452d955e
- SHA256
  
  c166886af3a9f84dd2d92c097d7fa6eecf11125e0875ca49f0e33b922d11ddd5
- SHA512
  
  654c5a9acf495f3d9f81629953e5ee5ad8ebb37532d128b35d30ff003cbea49c76df290aca977d6b3767aea27b128b4533618e8591628af3da4493321f4b3bc6
- SSDEEP
  
  12288:ZofvXDQUb7t2r2GKyLAaPEq2kJSKObLEXbEMd4L5mSG:ZoDQUb7t2rtAaPD2gXJuL8x
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence