313f285635602c231d5bfc08ca71a4a4b083d9aae3dd0213510ada6374073185 | Triage

Sharing

General

Target

d10b172099d67a256ab7ec2d4515d4eb_JaffaCakes118
Size

201KB
Sample

240907-eqn6lavbjc
MD5

d10b172099d67a256ab7ec2d4515d4eb
SHA1

693d842e591f658700fa5cbcebf4e440026811ae
SHA256

313f285635602c231d5bfc08ca71a4a4b083d9aae3dd0213510ada6374073185
SHA512

c9bdea846b5e3ab71e433547149ce35cf8808394d038c07ec1ab01bcb58ee9e648a7482fe9dd080b431ef34156c0ff19aa4b1d1b9b64b879ed1684ceb227362b
SSDEEP

3072:HEM78wOrgNfLbwthnM+NP26BnZIIJz/z+:H7ouwthHU6BZIIY

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d10b172099d67a256ab7ec2d4515d4eb_JaffaCakes118
- Size
  
  201KB
- MD5
  
  d10b172099d67a256ab7ec2d4515d4eb
- SHA1
  
  693d842e591f658700fa5cbcebf4e440026811ae
- SHA256
  
  313f285635602c231d5bfc08ca71a4a4b083d9aae3dd0213510ada6374073185
- SHA512
  
  c9bdea846b5e3ab71e433547149ce35cf8808394d038c07ec1ab01bcb58ee9e648a7482fe9dd080b431ef34156c0ff19aa4b1d1b9b64b879ed1684ceb227362b
- SSDEEP
  
  3072:HEM78wOrgNfLbwthnM+NP26BnZIIJz/z+:H7ouwthHU6BZIIY
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion