1552f8f8146c7c17bfd09aed34120c00968df4063ce2268c14c45740d89e8af0 | Triage

Sharing

General

Target

2a5b2667b68b7a968d2367304fb59aab_JaffaCakes118
Size

29KB
Sample

240708-awfn7ateml
MD5

2a5b2667b68b7a968d2367304fb59aab
SHA1

527d7aef66747821765e285296725e776b0a2280
SHA256

1552f8f8146c7c17bfd09aed34120c00968df4063ce2268c14c45740d89e8af0
SHA512

ab399425438b10f5411ae117eeffc54b608526e5bdab27a1228aa18f833712af937225d69388dc83db0b30ed714dde73ec199558f09c8eb0493948b435998718
SSDEEP

768:ZzAHmSrtOmkUpwiRtSl1CwFLPO9Conn8C:RAHDTpFR4CwLPO9tn8C

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  2a5b2667b68b7a968d2367304fb59aab_JaffaCakes118
- Size
  
  29KB
- MD5
  
  2a5b2667b68b7a968d2367304fb59aab
- SHA1
  
  527d7aef66747821765e285296725e776b0a2280
- SHA256
  
  1552f8f8146c7c17bfd09aed34120c00968df4063ce2268c14c45740d89e8af0
- SHA512
  
  ab399425438b10f5411ae117eeffc54b608526e5bdab27a1228aa18f833712af937225d69388dc83db0b30ed714dde73ec199558f09c8eb0493948b435998718
- SSDEEP
  
  768:ZzAHmSrtOmkUpwiRtSl1CwFLPO9Conn8C:RAHDTpFR4CwLPO9tn8C
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence