5f77c5a37068add71e63dd4e36b04b77de0218ff96724763be503843e8025817 | Triage

Sharing

General

Target

30f729404e0d65e85d7bd283fd78eee2_JaffaCakes118
Size

706KB
Sample

240709-s4paea1aqm
MD5

30f729404e0d65e85d7bd283fd78eee2
SHA1

fe3a3892ec47e07f65d8a59f728e51633ad743ee
SHA256

5f77c5a37068add71e63dd4e36b04b77de0218ff96724763be503843e8025817
SHA512

3622686a6062bb63468a0aebf4dd2b33832fdad147fa8cd860154909be62fe4eb4c5c74f2091d69df329ac4bdeea7dd351d2d6885ee0bdc1b13a6e75660300e9
SSDEEP

12288:hR8MQCNC+zS47tBlP8p145MqqgaLhMAfEKNTBLPIWnO:D75c277tBl4AAVMAfEan

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  30f729404e0d65e85d7bd283fd78eee2_JaffaCakes118
- Size
  
  706KB
- MD5
  
  30f729404e0d65e85d7bd283fd78eee2
- SHA1
  
  fe3a3892ec47e07f65d8a59f728e51633ad743ee
- SHA256
  
  5f77c5a37068add71e63dd4e36b04b77de0218ff96724763be503843e8025817
- SHA512
  
  3622686a6062bb63468a0aebf4dd2b33832fdad147fa8cd860154909be62fe4eb4c5c74f2091d69df329ac4bdeea7dd351d2d6885ee0bdc1b13a6e75660300e9
- SSDEEP
  
  12288:hR8MQCNC+zS47tBlP8p145MqqgaLhMAfEKNTBLPIWnO:D75c277tBl4AAVMAfEan
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2