4d4e883a43332d122201f5fd971ca7c6e104d31999f173e5f651fe664e367971 | Triage

Sharing

General

Target

3c7990b25009b1607fd396c60d3de319_JaffaCakes118
Size

692KB
Sample

241012-2x86nswdla
MD5

3c7990b25009b1607fd396c60d3de319
SHA1

c111757d8c2db70a7bd4c8d75ec6d33023bdbb28
SHA256

4d4e883a43332d122201f5fd971ca7c6e104d31999f173e5f651fe664e367971
SHA512

5b1d0eacba2673fe22ba63f2bfa24d2c7b5f4d74db9cde6ac6a2bed431b1d957fe28c99980694c82c655311189577c29e0f84f9cb11ced65a96c378356696349
SSDEEP

12288:bLuLvXX4FEbfNESFELiFXLAy6XkccGj3j3mZxRJu2toyWPET2Vxu0cdT:GLvHAEbLFTht6WS3rKJ2yIET2Vxu0c1

Score

9^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  3c7990b25009b1607fd396c60d3de319_JaffaCakes118
- Size
  
  692KB
- MD5
  
  3c7990b25009b1607fd396c60d3de319
- SHA1
  
  c111757d8c2db70a7bd4c8d75ec6d33023bdbb28
- SHA256
  
  4d4e883a43332d122201f5fd971ca7c6e104d31999f173e5f651fe664e367971
- SHA512
  
  5b1d0eacba2673fe22ba63f2bfa24d2c7b5f4d74db9cde6ac6a2bed431b1d957fe28c99980694c82c655311189577c29e0f84f9cb11ced65a96c378356696349
- SSDEEP
  
  12288:bLuLvXX4FEbfNESFELiFXLAy6XkccGj3j3mZxRJu2toyWPET2Vxu0cdT:GLvHAEbLFTht6WS3rKJ2yIET2Vxu0c1
Score

9^/10

discovery evasion persistence
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence