c00b4815694f13db6da7166df017846a456b8fa53db78d9960cd6f37e743122f | Triage

Sharing

General

Target

be462f9e2361006b4463e61041b77ff4_JaffaCakes118
Size

1.2MB
Sample

241203-t3916ayphp
MD5

be462f9e2361006b4463e61041b77ff4
SHA1

f53e3052dba745a1218c44de0f6018cae378dc9f
SHA256

c00b4815694f13db6da7166df017846a456b8fa53db78d9960cd6f37e743122f
SHA512

9c386eafeb8bacee84a1552a87eaf9efdad0041fd5d16d41d7fac6b65ecebfa5dc419ce47021874ceadf819de46ce99e33b7d723ae36dbc45a6fe9da2d98ded7
SSDEEP

24576:L6xqzBBycNHDy/SkXD8S7JWWZS1VfuN4C3cC9shRc/WGXcrrH:9f59sXD37JpsVkshOkH

Score

10^/10

discovery evasion execution persistence trojan

Malware Config

Targets

- Target
  
  be462f9e2361006b4463e61041b77ff4_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  be462f9e2361006b4463e61041b77ff4
- SHA1
  
  f53e3052dba745a1218c44de0f6018cae378dc9f
- SHA256
  
  c00b4815694f13db6da7166df017846a456b8fa53db78d9960cd6f37e743122f
- SHA512
  
  9c386eafeb8bacee84a1552a87eaf9efdad0041fd5d16d41d7fac6b65ecebfa5dc419ce47021874ceadf819de46ce99e33b7d723ae36dbc45a6fe9da2d98ded7
- SSDEEP
  
  24576:L6xqzBBycNHDy/SkXD8S7JWWZS1VfuN4C3cC9shRc/WGXcrrH:9f59sXD37JpsVkshOkH
Score

10^/10

discovery evasion execution persistence trojan
- Disables service(s)
  evasion execution
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2

discoveryevasionexecutionpersistencetrojan