05d81ec6d00debed85896519bd97cc5054bcd5cec1c9a0520585b7d4759d1bd9 | Triage

Sharing

General

Target

0d5d39bf2b2bd6ce210242e1bfe9a544_JaffaCakes118
Size

105KB
Sample

241003-b8llmssbjh
MD5

0d5d39bf2b2bd6ce210242e1bfe9a544
SHA1

1da7b1d2e7c60750f31e8a3be220d2555ad08633
SHA256

05d81ec6d00debed85896519bd97cc5054bcd5cec1c9a0520585b7d4759d1bd9
SHA512

f034578a3433c348c18f55c44ded22f748c355fe4502f8cf20040a509b59ed169dcbcd1cc71f1f98289512c402c60f3d405adefdde33b7481444b01a7dee45e2
SSDEEP

1536:2LqlQMjurZeH1K/Gy97KJCZBwu91ungxK6FEMMcC/jmyN1WJ1rkWmngFSpKKMf5S:zZjurA1K+w7KMuu1F+/jmSkmngV5CvMC

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  0d5d39bf2b2bd6ce210242e1bfe9a544_JaffaCakes118
- Size
  
  105KB
- MD5
  
  0d5d39bf2b2bd6ce210242e1bfe9a544
- SHA1
  
  1da7b1d2e7c60750f31e8a3be220d2555ad08633
- SHA256
  
  05d81ec6d00debed85896519bd97cc5054bcd5cec1c9a0520585b7d4759d1bd9
- SHA512
  
  f034578a3433c348c18f55c44ded22f748c355fe4502f8cf20040a509b59ed169dcbcd1cc71f1f98289512c402c60f3d405adefdde33b7481444b01a7dee45e2
- SSDEEP
  
  1536:2LqlQMjurZeH1K/Gy97KJCZBwu91ungxK6FEMMcC/jmyN1WJ1rkWmngFSpKKMf5S:zZjurA1K+w7KMuu1F+/jmSkmngV5CvMC
Score

10^/10

evasion persistence discovery
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Sets service image path in registry
  persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

discoveryevasionpersistence