66b10c7183b17ab701fadd3a2fca52cae887b2438e005d9e4b1b1d8e3f0272e1 | Triage

Sharing

General

Target

2b6a58df2d474a6f0e7fad22583447b1_JaffaCakes118
Size

22KB
Sample

240708-hxwe2azfma
MD5

2b6a58df2d474a6f0e7fad22583447b1
SHA1

54c451e67561497649701cd50b789b49fbde97c8
SHA256

66b10c7183b17ab701fadd3a2fca52cae887b2438e005d9e4b1b1d8e3f0272e1
SHA512

64b51c8dcef7af0fa0b5766140ab234c7acd464206536c330a143a999146194dc44ed849e4396da389f9163f7d0a930abfae4cc68531fc5c042ee121f9745ac6
SSDEEP

384:RCAVpr2v3D8e7G3Zh1m1p3us3uPCgNA658wKrKst/ArfAKBqzayAjbm1NeLNek+l:nVprgnmZrm1p+s+PCS7587tWsGyubu

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  2b6a58df2d474a6f0e7fad22583447b1_JaffaCakes118
- Size
  
  22KB
- MD5
  
  2b6a58df2d474a6f0e7fad22583447b1
- SHA1
  
  54c451e67561497649701cd50b789b49fbde97c8
- SHA256
  
  66b10c7183b17ab701fadd3a2fca52cae887b2438e005d9e4b1b1d8e3f0272e1
- SHA512
  
  64b51c8dcef7af0fa0b5766140ab234c7acd464206536c330a143a999146194dc44ed849e4396da389f9163f7d0a930abfae4cc68531fc5c042ee121f9745ac6
- SSDEEP
  
  384:RCAVpr2v3D8e7G3Zh1m1p3us3uPCgNA658wKrKst/ArfAKBqzayAjbm1NeLNek+l:nVprgnmZrm1p+s+PCS7587tWsGyubu
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2