dfd27eac9ebb4e99ac0b8187086cb2d3556d498af9483d9906952453efca85cd | Triage

Sharing

General

Target

14c713238bf002962ed23ecd02ca6046_JaffaCakes118
Size

99KB
Sample

241004-y1awhatfrn
MD5

14c713238bf002962ed23ecd02ca6046
SHA1

ba1039c35a0805963acdc59256a1e72d3fcdb5e3
SHA256

dfd27eac9ebb4e99ac0b8187086cb2d3556d498af9483d9906952453efca85cd
SHA512

587afc5c530d21119a14fcbc02b2c11b83685a6cf9d2a4dd2393546bdcc39c62b769713a255978a02ee7bd9374d901f23f9a41441b8020ce80f001f7dda2de69
SSDEEP

1536:6HmKBqJxyPBr3cu7VnlnnfV8kpsEtmgu:WmKBXhrnfCkpsEtmgu

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  14c713238bf002962ed23ecd02ca6046_JaffaCakes118
- Size
  
  99KB
- MD5
  
  14c713238bf002962ed23ecd02ca6046
- SHA1
  
  ba1039c35a0805963acdc59256a1e72d3fcdb5e3
- SHA256
  
  dfd27eac9ebb4e99ac0b8187086cb2d3556d498af9483d9906952453efca85cd
- SHA512
  
  587afc5c530d21119a14fcbc02b2c11b83685a6cf9d2a4dd2393546bdcc39c62b769713a255978a02ee7bd9374d901f23f9a41441b8020ce80f001f7dda2de69
- SSDEEP
  
  1536:6HmKBqJxyPBr3cu7VnlnnfV8kpsEtmgu:WmKBXhrnfCkpsEtmgu
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Deletes itself
- Executes dropped EXE
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistence