General

  • Target

    JaffaCakes118_436cf5ce2918a27ccd1fc7cfbf16dc8f

  • Size

    1.9MB

  • Sample

    250127-zap36svndl

  • MD5

    436cf5ce2918a27ccd1fc7cfbf16dc8f

  • SHA1

    7d8322456da2976a1713187aca968794566ea24e

  • SHA256

    f90bc1b609876e47e15f5014fe8797c22faeba7782d62c99e5f7ddb3aae2bb9f

  • SHA512

    740e73085a25164d7f2300695ecd41b82c219f5e56d5a9747a28f4d4292384c4409e97fe9d3599f3df4ab160c3678110aebc2121299b47d0cbb9ca74456fda53

  • SSDEEP

    12288:4vO2jCbhwdKLPYs0E55JJ5PsLk1rmiUpXwN0PxNBxliM5MPSx/B6zc:emYsL55heZd5PiMsSx/B6zc

Score
10/10

Malware Config

Targets

    • Target

      JaffaCakes118_436cf5ce2918a27ccd1fc7cfbf16dc8f

    • Size

      1.9MB

    • MD5

      436cf5ce2918a27ccd1fc7cfbf16dc8f

    • SHA1

      7d8322456da2976a1713187aca968794566ea24e

    • SHA256

      f90bc1b609876e47e15f5014fe8797c22faeba7782d62c99e5f7ddb3aae2bb9f

    • SHA512

      740e73085a25164d7f2300695ecd41b82c219f5e56d5a9747a28f4d4292384c4409e97fe9d3599f3df4ab160c3678110aebc2121299b47d0cbb9ca74456fda53

    • SSDEEP

      12288:4vO2jCbhwdKLPYs0E55JJ5PsLk1rmiUpXwN0PxNBxliM5MPSx/B6zc:emYsL55heZd5PiMsSx/B6zc

    Score
    10/10
    • Modifies WinLogon for persistence

    • Adds policy Run key to start application

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

    • Network Share Discovery

      Attempt to gather information on host network.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks