42d7777fead7926577ae21191c8b4e284a18d5257a53e1383c5e733aec776183 | Triage

Sharing

General

Target

eab90d077696649fb56131a1f9ef4107_JaffaCakes118
Size

63KB
Sample

240919-gsd5hstgnc
MD5

eab90d077696649fb56131a1f9ef4107
SHA1

fbf5a673edd532a7098f39ba262cf88ca3c11c44
SHA256

42d7777fead7926577ae21191c8b4e284a18d5257a53e1383c5e733aec776183
SHA512

b2e648aa714c4599d7e22ad58a60d9f9c61b45f365c98251c92eb498913bb200420ea7de721ca1abfb90b5ce8a7a757c2083152376c4c689c0ba243414dde036
SSDEEP

1536:bQfoefhLrmNjG7Ve0EWp9wH0r8q+S8zHXpc8sd:bQ3LrQG7dE3OGzHXvs

Score

10^/10

defense_evasion discovery evasion persistence ransomware trojan

Malware Config

Targets

- Target
  
  eab90d077696649fb56131a1f9ef4107_JaffaCakes118
- Size
  
  63KB
- MD5
  
  eab90d077696649fb56131a1f9ef4107
- SHA1
  
  fbf5a673edd532a7098f39ba262cf88ca3c11c44
- SHA256
  
  42d7777fead7926577ae21191c8b4e284a18d5257a53e1383c5e733aec776183
- SHA512
  
  b2e648aa714c4599d7e22ad58a60d9f9c61b45f365c98251c92eb498913bb200420ea7de721ca1abfb90b5ce8a7a757c2083152376c4c689c0ba243414dde036
- SSDEEP
  
  1536:bQfoefhLrmNjG7Ve0EWp9wH0r8q+S8zHXpc8sd:bQ3LrQG7dE3OGzHXvs
Score

10^/10

defense_evasion discovery evasion persistence ransomware trojan
- Windows security bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Modifies Shared Task Scheduler registry keys
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Impair Defenses

Disable or Modify Tools

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionpersistenceransomwaretrojan

behavioral2