22add892d49f720b17481d63b2d765add212aaef2fcd349551166e6454a408f6 | Triage

Sharing

General

Target

030a6a9481592fa8f992eb21c9ca4c93_JaffaCakes118
Size

184KB
Sample

240930-ynxjqssfjp
MD5

030a6a9481592fa8f992eb21c9ca4c93
SHA1

ef5e01bb48c8730051381429922ff5de517012d3
SHA256

22add892d49f720b17481d63b2d765add212aaef2fcd349551166e6454a408f6
SHA512

2a1bdbb4440a6a4b4aeab94899f6a5d344ba23783a9ffac11f0f9eb1f13e06f151e6e02391fa39316aae8ef84fcd7c6c2958c326895ce8e4fd4a6470655580c3
SSDEEP

3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW16:GWkWXV9wUezUroW+tCmCCfNGH

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  030a6a9481592fa8f992eb21c9ca4c93_JaffaCakes118
- Size
  
  184KB
- MD5
  
  030a6a9481592fa8f992eb21c9ca4c93
- SHA1
  
  ef5e01bb48c8730051381429922ff5de517012d3
- SHA256
  
  22add892d49f720b17481d63b2d765add212aaef2fcd349551166e6454a408f6
- SHA512
  
  2a1bdbb4440a6a4b4aeab94899f6a5d344ba23783a9ffac11f0f9eb1f13e06f151e6e02391fa39316aae8ef84fcd7c6c2958c326895ce8e4fd4a6470655580c3
- SSDEEP
  
  3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW16:GWkWXV9wUezUroW+tCmCCfNGH
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence