15ba9a974098b9296957875083062b1113c0615a943d8897ec2758c965e68d65 | Triage

Sharing

General

Target

945217ff6a2a54d759730eb17b17a663_JaffaCakes118
Size

48KB
Sample

240813-xjsjjs1ale
MD5

945217ff6a2a54d759730eb17b17a663
SHA1

9acb38c6531f2edb4bf6eb070451a4d6506a3886
SHA256

15ba9a974098b9296957875083062b1113c0615a943d8897ec2758c965e68d65
SHA512

a9bcba5ae9d643c55586a6c8970f4422500b03aa46eb233889a8fb1cd4acfd81c4c24afd82251548f8a99911777359e4c94b5b55bc7a015b0a4db4876b2d8c64
SSDEEP

384:E+/knl/RuGqiNAd+uVETXQTASlu5aXtHou/5nNbRQiGNdDSsFqJS+Dryd8p+u:ZWM5d+uVETXQegXlxzW6p+u

Score

8^/10

discovery evasion execution

Malware Config

Targets

- Target
  
  945217ff6a2a54d759730eb17b17a663_JaffaCakes118
- Size
  
  48KB
- MD5
  
  945217ff6a2a54d759730eb17b17a663
- SHA1
  
  9acb38c6531f2edb4bf6eb070451a4d6506a3886
- SHA256
  
  15ba9a974098b9296957875083062b1113c0615a943d8897ec2758c965e68d65
- SHA512
  
  a9bcba5ae9d643c55586a6c8970f4422500b03aa46eb233889a8fb1cd4acfd81c4c24afd82251548f8a99911777359e4c94b5b55bc7a015b0a4db4876b2d8c64
- SSDEEP
  
  384:E+/knl/RuGqiNAd+uVETXQTASlu5aXtHou/5nNbRQiGNdDSsFqJS+Dryd8p+u:ZWM5d+uVETXQegXlxzW6p+u
Score

8^/10

discovery evasion execution
- Stops running service(s)
  evasion execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecution

behavioral2

discoveryevasionexecution