d9f42c0c2fb278329049510224bbda49fad67e667e15255bb52a6f63a9b6fca1 | Triage

Sharing

General

Target

82d43c86c0c0d7b5c7c3454f44830b8f_JaffaCakes118
Size

393KB
Sample

240802-dqsncaxdrh
MD5

82d43c86c0c0d7b5c7c3454f44830b8f
SHA1

c109b8f3e2ef5ed4927b91356a1f45649d58f97b
SHA256

d9f42c0c2fb278329049510224bbda49fad67e667e15255bb52a6f63a9b6fca1
SHA512

a046e4c8a426ad04b78044cdf75836ada749e3a9ab046b957fd9a2b841a702d5e2b45978cb66a767d047e3470671ab13918078d4e25f87260c8eeb2f6e400245
SSDEEP

6144:LHzKzUVyGzOYYWxeSJ4P01bTk1HGPqb4+pcENN2Cn597M5yUtLKqW:vKeBCP010r04NN2C54ltLW

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  82d43c86c0c0d7b5c7c3454f44830b8f_JaffaCakes118
- Size
  
  393KB
- MD5
  
  82d43c86c0c0d7b5c7c3454f44830b8f
- SHA1
  
  c109b8f3e2ef5ed4927b91356a1f45649d58f97b
- SHA256
  
  d9f42c0c2fb278329049510224bbda49fad67e667e15255bb52a6f63a9b6fca1
- SHA512
  
  a046e4c8a426ad04b78044cdf75836ada749e3a9ab046b957fd9a2b841a702d5e2b45978cb66a767d047e3470671ab13918078d4e25f87260c8eeb2f6e400245
- SSDEEP
  
  6144:LHzKzUVyGzOYYWxeSJ4P01bTk1HGPqb4+pcENN2Cn597M5yUtLKqW:vKeBCP010r04NN2C54ltLW
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion