d03e5abf1a3ac56c8ef10b12adc9fe3742e1a4731ad8f7daa95628be214ffe50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

707983ca998f6a3828997132358bc9e4_JaffaCakes118
Size

337KB
Sample

240725-vljcjswelf
MD5

707983ca998f6a3828997132358bc9e4
SHA1

91ff468249adaf5690ce9d5071a567911eab1509
SHA256

d03e5abf1a3ac56c8ef10b12adc9fe3742e1a4731ad8f7daa95628be214ffe50
SHA512

a7df8dbd22379768e35e13cc61dc733b1e69e80d9dd52fa3ac6c6ebff1d50ab50f5b0fdae9884070997c10926200b4ef6351fd4c4c86f343e9cab37511bdbdd0
SSDEEP

6144:mmqCckzlrs6izXF7vcNrrA8k96zzjJGBC4vjRk:yCcgw6izVzcN8eIj2

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  707983ca998f6a3828997132358bc9e4_JaffaCakes118
- Size
  
  337KB
- MD5
  
  707983ca998f6a3828997132358bc9e4
- SHA1
  
  91ff468249adaf5690ce9d5071a567911eab1509
- SHA256
  
  d03e5abf1a3ac56c8ef10b12adc9fe3742e1a4731ad8f7daa95628be214ffe50
- SHA512
  
  a7df8dbd22379768e35e13cc61dc733b1e69e80d9dd52fa3ac6c6ebff1d50ab50f5b0fdae9884070997c10926200b4ef6351fd4c4c86f343e9cab37511bdbdd0
- SSDEEP
  
  6144:mmqCckzlrs6izXF7vcNrrA8k96zzjJGBC4vjRk:yCcgw6izVzcN8eIj2
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion