25ba3f1a0c060e63b6f5518d9ad3403118d39670d9105068a39821cd7e50cf69 | Triage

Sharing

General

Target

Tax_Documents_PDF.jar
Size

672KB
Sample

240625-ymactazalf
MD5

8747ab5df0443e86279acdb86cfbece9
SHA1

d8353f3691a43e6ea50343105bedce881d030fd9
SHA256

25ba3f1a0c060e63b6f5518d9ad3403118d39670d9105068a39821cd7e50cf69
SHA512

a00dd65225a196eb05584962dac6330ae56daf8c66a17115e9ae8fc27d865e1b5950dca459bf77519b1264d41f413165970178bb2138bfdd8bdb20113a3f79a9
SSDEEP

12288:Y7N/Ea6CDFvtGjfOhaTcKXa56HK7hdtNXYtkjgukSG5kiKyp60hvf9c1u+M:O56w1GWaTa4HK7hdvGuYbKy1vfaut

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  Tax_Documents_PDF.jar
- Size
  
  672KB
- MD5
  
  8747ab5df0443e86279acdb86cfbece9
- SHA1
  
  d8353f3691a43e6ea50343105bedce881d030fd9
- SHA256
  
  25ba3f1a0c060e63b6f5518d9ad3403118d39670d9105068a39821cd7e50cf69
- SHA512
  
  a00dd65225a196eb05584962dac6330ae56daf8c66a17115e9ae8fc27d865e1b5950dca459bf77519b1264d41f413165970178bb2138bfdd8bdb20113a3f79a9
- SSDEEP
  
  12288:Y7N/Ea6CDFvtGjfOhaTcKXa56HK7hdtNXYtkjgukSG5kiKyp60hvf9c1u+M:O56w1GWaTa4HK7hdvGuYbKy1vfaut
Score

7^/10

discovery persistence
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence