f7f7085d107045d9ec554f96e7a07404b8da79a0141a2106aa599434b6845303 | Triage

Sharing

General

Target

ef9c186bfec2860a1a681793e8c800b9_JaffaCakes118
Size

206KB
Sample

240921-mnpncayajl
MD5

ef9c186bfec2860a1a681793e8c800b9
SHA1

c261a68a0a3368d1580b720cb313319cd04ecdbf
SHA256

f7f7085d107045d9ec554f96e7a07404b8da79a0141a2106aa599434b6845303
SHA512

28bd37c6146326fff3f349118a1fb75f4ef70bde5ff1308086e0dff94d6df619cef420f7dca48d10ca8ac6d24f37688e1fd0b690eb7098b85b41084ce3cb8d22
SSDEEP

3072:bbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA2:bbl5RKgOGqml80FrgTRHGvJI08iYM

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  ef9c186bfec2860a1a681793e8c800b9_JaffaCakes118
- Size
  
  206KB
- MD5
  
  ef9c186bfec2860a1a681793e8c800b9
- SHA1
  
  c261a68a0a3368d1580b720cb313319cd04ecdbf
- SHA256
  
  f7f7085d107045d9ec554f96e7a07404b8da79a0141a2106aa599434b6845303
- SHA512
  
  28bd37c6146326fff3f349118a1fb75f4ef70bde5ff1308086e0dff94d6df619cef420f7dca48d10ca8ac6d24f37688e1fd0b690eb7098b85b41084ce3cb8d22
- SSDEEP
  
  3072:bbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA2:bbl5RKgOGqml80FrgTRHGvJI08iYM
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence