3e23fcd434d05af6b9ec3cd2382430c0ef8bd6cff67000b43dcc4110daed4039 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be93b30011b5604b6d2e77d95acad25b_JaffaCakes118
Size

332KB
Sample

240824-ph86xa1frl
MD5

be93b30011b5604b6d2e77d95acad25b
SHA1

3c7692b70e1449ef4b0b8d0b6ad14bc838114301
SHA256

3e23fcd434d05af6b9ec3cd2382430c0ef8bd6cff67000b43dcc4110daed4039
SHA512

0be58f66bfa366c44a20fe1615fbc423487dd08595cd0176171b30c5a6bb45fb53de2349fc94c687ccce38fbb44abb34fb4a958b331f86e7f3455474fdba7ed5
SSDEEP

6144:pFNVIkU3Sx7YjyHq7KzjMIgSLYxlmJ3YtbVtwdSJ53S6AbofVo89T:pJIL3Kjr5gSOy3YZC6Bo

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  be93b30011b5604b6d2e77d95acad25b_JaffaCakes118
- Size
  
  332KB
- MD5
  
  be93b30011b5604b6d2e77d95acad25b
- SHA1
  
  3c7692b70e1449ef4b0b8d0b6ad14bc838114301
- SHA256
  
  3e23fcd434d05af6b9ec3cd2382430c0ef8bd6cff67000b43dcc4110daed4039
- SHA512
  
  0be58f66bfa366c44a20fe1615fbc423487dd08595cd0176171b30c5a6bb45fb53de2349fc94c687ccce38fbb44abb34fb4a958b331f86e7f3455474fdba7ed5
- SSDEEP
  
  6144:pFNVIkU3Sx7YjyHq7KzjMIgSLYxlmJ3YtbVtwdSJ53S6AbofVo89T:pJIL3Kjr5gSOy3YZC6Bo
Score

8^/10

discovery evasion persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2