515df8e6b3442d1b1478c9dd60f9372a6624affa4da97c95259769830837eccf | Triage

Sharing

General

Target

091dee4a62a73e6f545e87fbccf0c691_JaffaCakes118
Size

206KB
Sample

241002-f75qcazbjj
MD5

091dee4a62a73e6f545e87fbccf0c691
SHA1

b1484f5dccd8f37329fb7cccad0f6910694cb114
SHA256

515df8e6b3442d1b1478c9dd60f9372a6624affa4da97c95259769830837eccf
SHA512

3560647e7f80d67e2630e401eee7cdf9b9b9b3d733e2cb2130bb7138b12b6743dc49758c7f5e10b7901a1b40ff30fd33f5f557d3f3fef0f33ace4807e2b70e13
SSDEEP

3072:bbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA4g:bbl5RKgOGqml80FrgTRHGvJI08iYJ

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  091dee4a62a73e6f545e87fbccf0c691_JaffaCakes118
- Size
  
  206KB
- MD5
  
  091dee4a62a73e6f545e87fbccf0c691
- SHA1
  
  b1484f5dccd8f37329fb7cccad0f6910694cb114
- SHA256
  
  515df8e6b3442d1b1478c9dd60f9372a6624affa4da97c95259769830837eccf
- SHA512
  
  3560647e7f80d67e2630e401eee7cdf9b9b9b3d733e2cb2130bb7138b12b6743dc49758c7f5e10b7901a1b40ff30fd33f5f557d3f3fef0f33ace4807e2b70e13
- SSDEEP
  
  3072:bbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA4g:bbl5RKgOGqml80FrgTRHGvJI08iYJ
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence