0c614c4220b83ea23983e8a174056e37dc068d0d83830896192885da232be4df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d70f359986fa5b608dea6437907208e0_JaffaCakes118
Size

338KB
Sample

240909-zgdcys1cng
MD5

d70f359986fa5b608dea6437907208e0
SHA1

86205708ef2cc6644a32d9cc0911aa0e9d1401bf
SHA256

0c614c4220b83ea23983e8a174056e37dc068d0d83830896192885da232be4df
SHA512

d4a5e2711ea16655eaf162a57443d77502b945daf2697f8c0cb6643030cfd1585950163e8437fb730ad0779de1f21f2e86a80187ba6d0ea99508699bb64c4683
SSDEEP

6144:lryKOqWLghtDYvK2WLfqqhWItmOSjRbYrYSpRXS0nkhwTa:UKOzLpvILspYXDXMwTa

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d70f359986fa5b608dea6437907208e0_JaffaCakes118
- Size
  
  338KB
- MD5
  
  d70f359986fa5b608dea6437907208e0
- SHA1
  
  86205708ef2cc6644a32d9cc0911aa0e9d1401bf
- SHA256
  
  0c614c4220b83ea23983e8a174056e37dc068d0d83830896192885da232be4df
- SHA512
  
  d4a5e2711ea16655eaf162a57443d77502b945daf2697f8c0cb6643030cfd1585950163e8437fb730ad0779de1f21f2e86a80187ba6d0ea99508699bb64c4683
- SSDEEP
  
  6144:lryKOqWLghtDYvK2WLfqqhWItmOSjRbYrYSpRXS0nkhwTa:UKOzLpvILspYXDXMwTa
Score

8^/10

discovery evasion persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2