9feb7464a4f1ba9a5f8d670ea5bd71b8f28cae9b5f4accbd71e93accee11ce9b | Triage

Sharing

General

Target

437775e12356da0a5e830ab0c0cfcd15_JaffaCakes118
Size

50KB
Sample

240713-1mrm7s1bmd
MD5

437775e12356da0a5e830ab0c0cfcd15
SHA1

ccfa05ef4891796e47db6e8719f70d5494f0d0b1
SHA256

9feb7464a4f1ba9a5f8d670ea5bd71b8f28cae9b5f4accbd71e93accee11ce9b
SHA512

16fb31fbad4fe393f20150589a93d431ebddde1ca33b4383b34ce28f20f0f85c6bad6ff9cf365e0fbc0f7d058051717c6923982ceca9af4cb3c0856576143cfb
SSDEEP

768:VN6pRCG10Z8t8yPDtxdkVuctLz+aS/XvhZLqQ5x2TNKhYrfzaWgroex1iuz5GTuX:AGyP3+gvhFDf2wQid3TVGS

Score

8^/10

evasion execution persistence

Malware Config

Targets

- Target
  
  437775e12356da0a5e830ab0c0cfcd15_JaffaCakes118
- Size
  
  50KB
- MD5
  
  437775e12356da0a5e830ab0c0cfcd15
- SHA1
  
  ccfa05ef4891796e47db6e8719f70d5494f0d0b1
- SHA256
  
  9feb7464a4f1ba9a5f8d670ea5bd71b8f28cae9b5f4accbd71e93accee11ce9b
- SHA512
  
  16fb31fbad4fe393f20150589a93d431ebddde1ca33b4383b34ce28f20f0f85c6bad6ff9cf365e0fbc0f7d058051717c6923982ceca9af4cb3c0856576143cfb
- SSDEEP
  
  768:VN6pRCG10Z8t8yPDtxdkVuctLz+aS/XvhZLqQ5x2TNKhYrfzaWgroex1iuz5GTuX:AGyP3+gvhFDf2wQid3TVGS
Score

8^/10

evasion execution persistence
- Creates new service(s)
  persistence execution
- Stops running service(s)
  evasion execution
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecutionpersistence

behavioral2

evasionexecutionpersistence