ebcf328769e3df728c2fbd7b43a6dc706eb64a9a75c018e3c9fa372060863ab1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08876b7185d99fa817cd54e65243c037_JaffaCakes118
Size

161KB
Sample

240624-prbxrswbkr
MD5

08876b7185d99fa817cd54e65243c037
SHA1

a03e30ffba7fbf123c8e759ae060c4d316b4b6e2
SHA256

ebcf328769e3df728c2fbd7b43a6dc706eb64a9a75c018e3c9fa372060863ab1
SHA512

d3c922f712cb4113176a210f40a54aa546ec175cc7a06da0a4c8c6081d3e37fa7bf6f1242f2d19f2fb38a6f560c83d629e7e089b3c2f0383d132979cd30bc6f2
SSDEEP

3072:Puo1MlSEqhqJhJy0WTHW69B9VjMdxPedN9ug0/9TBfRSO+Y/VkagHggwy2:P5oaqJhJMHW69B9VjMdxPedN9ug0/9TH

Score

10^/10

evasion execution

Malware Config

Targets

- Target
  
  08876b7185d99fa817cd54e65243c037_JaffaCakes118
- Size
  
  161KB
- MD5
  
  08876b7185d99fa817cd54e65243c037
- SHA1
  
  a03e30ffba7fbf123c8e759ae060c4d316b4b6e2
- SHA256
  
  ebcf328769e3df728c2fbd7b43a6dc706eb64a9a75c018e3c9fa372060863ab1
- SHA512
  
  d3c922f712cb4113176a210f40a54aa546ec175cc7a06da0a4c8c6081d3e37fa7bf6f1242f2d19f2fb38a6f560c83d629e7e089b3c2f0383d132979cd30bc6f2
- SSDEEP
  
  3072:Puo1MlSEqhqJhJy0WTHW69B9VjMdxPedN9ug0/9TBfRSO+Y/VkagHggwy2:P5oaqJhJMHW69B9VjMdxPedN9ug0/9TH
Score

10^/10

evasion execution
- Disables service(s)
  evasion execution
- Modifies service settings
  Alters the configuration of existing services.
  evasion
- Stops running service(s)
  evasion execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Remote System Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution

behavioral2

evasionexecution