4116dc634bbd33fab1a31b6194ad2ff237912891ecb4fa24dfdc2f257dac68b9 | Triage

Sharing

General

Target

773d45b236c51a24defb9a713c0c905c_JaffaCakes118
Size

3.3MB
Sample

240727-hcksssveme
MD5

773d45b236c51a24defb9a713c0c905c
SHA1

6a3d7eecb062b333424f7ea853dd8a31178b04ce
SHA256

4116dc634bbd33fab1a31b6194ad2ff237912891ecb4fa24dfdc2f257dac68b9
SHA512

5073a1f347c57c151f154ab2a96d85c6b1810a2b283460b8f84a430a0122d1da5188e2f727164a513c458dbbe6641705a2959728a6c4792e7055c73a090fe067
SSDEEP

49152:iGtlq/yIU6iP/GddQoErmuMt33fOktlCi3PwHaw6nIgOR3qQDzbR5IKAhEGiPKu1:u+P/ZMt33flCjjH5IbZBu3fsm

Score

8^/10

evasion execution

Malware Config

Targets

- Target
  
  773d45b236c51a24defb9a713c0c905c_JaffaCakes118
- Size
  
  3.3MB
- MD5
  
  773d45b236c51a24defb9a713c0c905c
- SHA1
  
  6a3d7eecb062b333424f7ea853dd8a31178b04ce
- SHA256
  
  4116dc634bbd33fab1a31b6194ad2ff237912891ecb4fa24dfdc2f257dac68b9
- SHA512
  
  5073a1f347c57c151f154ab2a96d85c6b1810a2b283460b8f84a430a0122d1da5188e2f727164a513c458dbbe6641705a2959728a6c4792e7055c73a090fe067
- SSDEEP
  
  49152:iGtlq/yIU6iP/GddQoErmuMt33fOktlCi3PwHaw6nIgOR3qQDzbR5IKAhEGiPKu1:u+P/ZMt33flCjjH5IbZBu3fsm
Score

8^/10

evasion execution
- Stops running service(s)
  evasion execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution

behavioral2

evasionexecution