613d03109695dbee799a0907950f4c15869e0e6a2175dd9b5b6dfa4634f2181b | Triage

Sharing

General

Target

6fca55d1dde1c3941295af423342841e_JaffaCakes118
Size

94KB
Sample

240725-qvqe1a1emr
MD5

6fca55d1dde1c3941295af423342841e
SHA1

ce01bdbf9b453098d8a74e0fe2406e19c31164d8
SHA256

613d03109695dbee799a0907950f4c15869e0e6a2175dd9b5b6dfa4634f2181b
SHA512

cb3f2a4dbd9c2da9a793302c11a6e2f944a0434e01fb876f1eea0c7bf6701722f5c9066c8be165e49026bf8482f39beb0e495dcf1db4012bb9161287f0f62168
SSDEEP

1536:vWPL21/CFz94NL3kW/ugNO4AL9hm37IrxdTFgy8y0xC190Of3lF0:Ka1qpuN7Mg84AbmLgxdFgsyCT0Of

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  6fca55d1dde1c3941295af423342841e_JaffaCakes118
- Size
  
  94KB
- MD5
  
  6fca55d1dde1c3941295af423342841e
- SHA1
  
  ce01bdbf9b453098d8a74e0fe2406e19c31164d8
- SHA256
  
  613d03109695dbee799a0907950f4c15869e0e6a2175dd9b5b6dfa4634f2181b
- SHA512
  
  cb3f2a4dbd9c2da9a793302c11a6e2f944a0434e01fb876f1eea0c7bf6701722f5c9066c8be165e49026bf8482f39beb0e495dcf1db4012bb9161287f0f62168
- SSDEEP
  
  1536:vWPL21/CFz94NL3kW/ugNO4AL9hm37IrxdTFgy8y0xC190Of3lF0:Ka1qpuN7Mg84AbmLgxdFgsyCT0Of
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion