f33df4ad649efb48212befef1d757efc2b67f535c205d36ff7f68b1109540994 | Triage

Sharing

General

Target

d1549b98c81fbf367849f843a2ed67f3_JaffaCakes118
Size

102KB
Sample

240907-hn73ga1akr
MD5

d1549b98c81fbf367849f843a2ed67f3
SHA1

93eaee304a582f53f5d3b0cd932cde01f6751325
SHA256

f33df4ad649efb48212befef1d757efc2b67f535c205d36ff7f68b1109540994
SHA512

ac945aadf996c36508a6738cfd98f2a964d1c0d5715959a12f5a989d07de22b1ce427b31b440d9b0ea2bd00f41ac0a4ed974b5721c423dbd0eb405fd7196b37b
SSDEEP

1536:R7qVQOTXzzmZeH1KfMqd3kpZNq7X3LkQyt4KuUU/6Uu+eZOo3nTLBiA54PY:M5XzzmA1K0quqX3n1CU/Nu+KJ3xiAu

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d1549b98c81fbf367849f843a2ed67f3_JaffaCakes118
- Size
  
  102KB
- MD5
  
  d1549b98c81fbf367849f843a2ed67f3
- SHA1
  
  93eaee304a582f53f5d3b0cd932cde01f6751325
- SHA256
  
  f33df4ad649efb48212befef1d757efc2b67f535c205d36ff7f68b1109540994
- SHA512
  
  ac945aadf996c36508a6738cfd98f2a964d1c0d5715959a12f5a989d07de22b1ce427b31b440d9b0ea2bd00f41ac0a4ed974b5721c423dbd0eb405fd7196b37b
- SSDEEP
  
  1536:R7qVQOTXzzmZeH1KfMqd3kpZNq7X3LkQyt4KuUU/6Uu+eZOo3nTLBiA54PY:M5XzzmA1K0quqX3n1CU/Nu+KJ3xiAu
Score

10^/10

evasion persistence discovery
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Sets service image path in registry
  persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

discoveryevasionpersistence