3cd3f84f0eff128eef8a4296e429c128632f42e23dc61964a7a3d9f3146cadde | Triage

Sharing

General

Target

eec6cb93dfd30ffacb39eaa1fa18fa14_JaffaCakes118
Size

579KB
Sample

240921-beew1axfng
MD5

eec6cb93dfd30ffacb39eaa1fa18fa14
SHA1

01ea1384577a2c89e26ff7b240f30486bb22d323
SHA256

3cd3f84f0eff128eef8a4296e429c128632f42e23dc61964a7a3d9f3146cadde
SHA512

39e2b32d50b59b95a3d2b8e29ee5fadfe2d06b3c82d1ab088a434f780fd634ebe2803d02e3085693aaf80287fab73f2d7c1908347f96cec0c08edc32f0b121a9
SSDEEP

12288:RW2Ej2Pqnr2tavzhxLhFLtrfnuJr05c6kb:RdEjOqn0avhFLtjsrX

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  eec6cb93dfd30ffacb39eaa1fa18fa14_JaffaCakes118
- Size
  
  579KB
- MD5
  
  eec6cb93dfd30ffacb39eaa1fa18fa14
- SHA1
  
  01ea1384577a2c89e26ff7b240f30486bb22d323
- SHA256
  
  3cd3f84f0eff128eef8a4296e429c128632f42e23dc61964a7a3d9f3146cadde
- SHA512
  
  39e2b32d50b59b95a3d2b8e29ee5fadfe2d06b3c82d1ab088a434f780fd634ebe2803d02e3085693aaf80287fab73f2d7c1908347f96cec0c08edc32f0b121a9
- SSDEEP
  
  12288:RW2Ej2Pqnr2tavzhxLhFLtrfnuJr05c6kb:RdEjOqn0avhFLtjsrX
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence