3f4be00553a7b4f1fdd25970ffbc0bea6297cd3a0a701831f73ccad18f310ba0 | Triage

Sharing

General

Target

b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118
Size

1.6MB
Sample

240820-zyvcsstbpf
MD5

b0d827c1c2667f29f5e681e79e1af957
SHA1

2cf305ed64726b1e82441d838aac5b86ee5610f4
SHA256

3f4be00553a7b4f1fdd25970ffbc0bea6297cd3a0a701831f73ccad18f310ba0
SHA512

754bab6052af877f002a00157e8a9f0964d6604346b9279821dfdb08eba935c1dcae07280fbde8876a7f8c21af54719d7fd0fe312378d38f390eac0a7586a88b
SSDEEP

49152:AxXlN9dk9qgDidqSwJnTkWwIz30sa/kbc1FrcT:AxXlR6Mdq/TYIz30z9u

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  b0d827c1c2667f29f5e681e79e1af957
- SHA1
  
  2cf305ed64726b1e82441d838aac5b86ee5610f4
- SHA256
  
  3f4be00553a7b4f1fdd25970ffbc0bea6297cd3a0a701831f73ccad18f310ba0
- SHA512
  
  754bab6052af877f002a00157e8a9f0964d6604346b9279821dfdb08eba935c1dcae07280fbde8876a7f8c21af54719d7fd0fe312378d38f390eac0a7586a88b
- SSDEEP
  
  49152:AxXlN9dk9qgDidqSwJnTkWwIz30sa/kbc1FrcT:AxXlR6Mdq/TYIz30z9u
Score

8^/10

discovery evasion persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2