9eb028c51007b1ecee20304dafae84fc0905c53cdc541f1e1a71062e3fa19c93 | Triage

Sharing

General

Target

ead132aa943e8b9a653c867befa40d70_JaffaCakes118
Size

24KB
Sample

240919-hxhtyawhln
MD5

ead132aa943e8b9a653c867befa40d70
SHA1

8bc3a9e5988a99afde3c34d4c61eb900b3507360
SHA256

9eb028c51007b1ecee20304dafae84fc0905c53cdc541f1e1a71062e3fa19c93
SHA512

26a1b22ce12433874b8cfb248c2e7f1e7ecdffaf6b022e09ded95b1ed44dfaedaa8f2ab5984ddb514e5a076f88e02ebfa417fbef74ceef9a62807f6c9da4373b
SSDEEP

192:xFcFch3+53tijuZUObXNDG8SgIDHN0gd0zYJtPyQryOlpD2689OeuFY:xFcFgOPijulbNi8xIDHP0UHlpD2GY

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  ead132aa943e8b9a653c867befa40d70_JaffaCakes118
- Size
  
  24KB
- MD5
  
  ead132aa943e8b9a653c867befa40d70
- SHA1
  
  8bc3a9e5988a99afde3c34d4c61eb900b3507360
- SHA256
  
  9eb028c51007b1ecee20304dafae84fc0905c53cdc541f1e1a71062e3fa19c93
- SHA512
  
  26a1b22ce12433874b8cfb248c2e7f1e7ecdffaf6b022e09ded95b1ed44dfaedaa8f2ab5984ddb514e5a076f88e02ebfa417fbef74ceef9a62807f6c9da4373b
- SSDEEP
  
  192:xFcFch3+53tijuZUObXNDG8SgIDHN0gd0zYJtPyQryOlpD2689OeuFY:xFcFgOPijulbNi8xIDHP0UHlpD2GY
Score

8^/10

discovery evasion persistence
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence