aea17fe91c0282671abc69c6260e04eab833948570d3cf869756151e473957c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

325db41b12d32ad50603385ca14472a7_JaffaCakes118
Size

152KB
Sample

240709-25vm9a1glm
MD5

325db41b12d32ad50603385ca14472a7
SHA1

8dbb38ed9fdc48daf226c642744b3235695c8352
SHA256

aea17fe91c0282671abc69c6260e04eab833948570d3cf869756151e473957c0
SHA512

c4666471f16fc3e6202ca73157f7c85872429567fb4de6baf0b44c1f3476671746709bc739e4267556d2094075759c3a32efd13a351f30ac82876ed11fef0082
SSDEEP

3072:+3bJADd+outSPre9xJ00s6ehgZOHOrD1KA24t2Mt2TR:QJ5oSee3chgZzKsL4TR

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  325db41b12d32ad50603385ca14472a7_JaffaCakes118
- Size
  
  152KB
- MD5
  
  325db41b12d32ad50603385ca14472a7
- SHA1
  
  8dbb38ed9fdc48daf226c642744b3235695c8352
- SHA256
  
  aea17fe91c0282671abc69c6260e04eab833948570d3cf869756151e473957c0
- SHA512
  
  c4666471f16fc3e6202ca73157f7c85872429567fb4de6baf0b44c1f3476671746709bc739e4267556d2094075759c3a32efd13a351f30ac82876ed11fef0082
- SSDEEP
  
  3072:+3bJADd+outSPre9xJ00s6ehgZOHOrD1KA24t2Mt2TR:QJ5oSee3chgZzKsL4TR
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence