448c916483d9a19490c29bbd8286ff297d8fa1828f5626deebc82ea605e66928 | Triage

Sharing

General

Target

025e0b547c344ac713a7284e17feaca7_JaffaCakes118
Size

90KB
Sample

240930-vg68tawckl
MD5

025e0b547c344ac713a7284e17feaca7
SHA1

8272182126be5918c63e02813b60bc4a0cfecedd
SHA256

448c916483d9a19490c29bbd8286ff297d8fa1828f5626deebc82ea605e66928
SHA512

157428402028baa6c8f9d3f9c5a470b2f50369067374a8627e4c81accc925210c36dab0afd6d0e94e9f3aea37e4d0a4a1568c32c30d3c1882da55a19a75152c1
SSDEEP

1536:o7f9h0UPJP/CpICdikMLMLv5PFNg1qrX+VIOlnToIf7gIxsV3M3aOn:mliUPXC8k1nJrX+fNTBfnyM3Z

Score

10^/10

defense_evasion discovery evasion trojan

Malware Config

Targets

- Target
  
  025e0b547c344ac713a7284e17feaca7_JaffaCakes118
- Size
  
  90KB
- MD5
  
  025e0b547c344ac713a7284e17feaca7
- SHA1
  
  8272182126be5918c63e02813b60bc4a0cfecedd
- SHA256
  
  448c916483d9a19490c29bbd8286ff297d8fa1828f5626deebc82ea605e66928
- SHA512
  
  157428402028baa6c8f9d3f9c5a470b2f50369067374a8627e4c81accc925210c36dab0afd6d0e94e9f3aea37e4d0a4a1568c32c30d3c1882da55a19a75152c1
- SSDEEP
  
  1536:o7f9h0UPJP/CpICdikMLMLv5PFNg1qrX+VIOlnToIf7gIxsV3M3aOn:mliUPXC8k1nJrX+fNTBfnyM3Z
Score

10^/10

defense_evasion discovery evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Modifies security service
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies Security services
  Modifies the startup behavior of a security service.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasiontrojan

behavioral2

defense_evasiondiscoveryevasiontrojan