0dd13fbcf75baf8c78c84b0d1b390f5e398b85f796d38570f50001f478051e8c | Triage

Sharing

General

Target

8681bdd8baa82e370313162707ea41b0_JaffaCakes118
Size

146KB
Sample

240810-sa2cwaycmb
MD5

8681bdd8baa82e370313162707ea41b0
SHA1

2c6769b8b1058c3b8ec62567be851ac697d08016
SHA256

0dd13fbcf75baf8c78c84b0d1b390f5e398b85f796d38570f50001f478051e8c
SHA512

7fcc98a16ff05e03927be1b37d2d6abadd0d974b01a794662345cc5e625b3572bca50f82d5638296a4c110cb2aef1737796481fe445c62e48cf9d637319c7b20
SSDEEP

3072:skh3VK2abS5VHwO8KdKiZuNuEJ+4PmzZhdCkyw/wBk:pVQO8uZUE48xywo

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  8681bdd8baa82e370313162707ea41b0_JaffaCakes118
- Size
  
  146KB
- MD5
  
  8681bdd8baa82e370313162707ea41b0
- SHA1
  
  2c6769b8b1058c3b8ec62567be851ac697d08016
- SHA256
  
  0dd13fbcf75baf8c78c84b0d1b390f5e398b85f796d38570f50001f478051e8c
- SHA512
  
  7fcc98a16ff05e03927be1b37d2d6abadd0d974b01a794662345cc5e625b3572bca50f82d5638296a4c110cb2aef1737796481fe445c62e48cf9d637319c7b20
- SSDEEP
  
  3072:skh3VK2abS5VHwO8KdKiZuNuEJ+4PmzZhdCkyw/wBk:pVQO8uZUE48xywo
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Drops file in Drivers directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion