decf4952d3c2aa452ac36f5bbb869a6331a7945c75c4a311f256e6dfff4810c6 | Triage

Sharing

General

Target

28e1abda931e06dc450a614acae511f2_JaffaCakes118
Size

111KB
Sample

241009-cgvwnssarm
MD5

28e1abda931e06dc450a614acae511f2
SHA1

724989036b779724d0217bbef31abfd43ee36757
SHA256

decf4952d3c2aa452ac36f5bbb869a6331a7945c75c4a311f256e6dfff4810c6
SHA512

8e9f7f047fc7dce1da6ed99efbde17010bc2943b2ed4d210de8782656f134237c55e2adb1fa3bbafd2443dd38b7f94ce215362ab3a759a6bb30a453fe0edf324
SSDEEP

3072:zZjurA1K+w7KMuu1F+/jmSkmngV5CvMmr:1V9pj/2+2Q9

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  28e1abda931e06dc450a614acae511f2_JaffaCakes118
- Size
  
  111KB
- MD5
  
  28e1abda931e06dc450a614acae511f2
- SHA1
  
  724989036b779724d0217bbef31abfd43ee36757
- SHA256
  
  decf4952d3c2aa452ac36f5bbb869a6331a7945c75c4a311f256e6dfff4810c6
- SHA512
  
  8e9f7f047fc7dce1da6ed99efbde17010bc2943b2ed4d210de8782656f134237c55e2adb1fa3bbafd2443dd38b7f94ce215362ab3a759a6bb30a453fe0edf324
- SSDEEP
  
  3072:zZjurA1K+w7KMuu1F+/jmSkmngV5CvMmr:1V9pj/2+2Q9
Score

10^/10

evasion persistence discovery
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Sets service image path in registry
  persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

discoveryevasionpersistence