bc1e4dc794656a2739dbcf5b66a5af70ccbf7aa2c278fe5e39049d0f51a3e94d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0788974e98860163c3f8ab4b291435e_JaffaCakes118
Size

40KB
Sample

240906-z5s4baybmp
MD5

d0788974e98860163c3f8ab4b291435e
SHA1

4283749ed172bb0b55c396c19413d36a254b17b9
SHA256

bc1e4dc794656a2739dbcf5b66a5af70ccbf7aa2c278fe5e39049d0f51a3e94d
SHA512

080ccfd646c5c6f8b55d5984ff082fe0c7a2bfae0b6205cb8f3cff929baa54e31ffb7c0a3d5a436818a454c9799419452172425b0b0411e825d52c2730732bc1
SSDEEP

768:Q/qNxVq4ldw8b8Exe999VC+tUI3DoiYObPuI+2j:Q/qRqPEe999VxWI3DoiYu9

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d0788974e98860163c3f8ab4b291435e_JaffaCakes118
- Size
  
  40KB
- MD5
  
  d0788974e98860163c3f8ab4b291435e
- SHA1
  
  4283749ed172bb0b55c396c19413d36a254b17b9
- SHA256
  
  bc1e4dc794656a2739dbcf5b66a5af70ccbf7aa2c278fe5e39049d0f51a3e94d
- SHA512
  
  080ccfd646c5c6f8b55d5984ff082fe0c7a2bfae0b6205cb8f3cff929baa54e31ffb7c0a3d5a436818a454c9799419452172425b0b0411e825d52c2730732bc1
- SSDEEP
  
  768:Q/qNxVq4ldw8b8Exe999VC+tUI3DoiYObPuI+2j:Q/qRqPEe999VxWI3DoiYu9
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence