5e9999571194985f057ebece84566e6a6d734e300a7075916bee18bc9370f458 | Triage

Sharing

General

Target

a1baf70889d9e95c8e1e90c48fc50e72_JaffaCakes118
Size

51KB
Sample

240817-jn3nesyanq
MD5

a1baf70889d9e95c8e1e90c48fc50e72
SHA1

16df5352c014b6b9905b561511f86d4b4db3ed1e
SHA256

5e9999571194985f057ebece84566e6a6d734e300a7075916bee18bc9370f458
SHA512

e32a9f7eb4be00a6f3aeb96d7d478182257d0d83cdfbd79c3612de50c564262b159ac2dc2d020812f9da5e1e1cf23e051ed1c51082c482dc8b38f25ab25b88e8
SSDEEP

768:+4pCHse7ARlbQ8CDdJCiWcDpngIEc9KvK9q:TMMekR5Q8CDd6cZDl9

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  a1baf70889d9e95c8e1e90c48fc50e72_JaffaCakes118
- Size
  
  51KB
- MD5
  
  a1baf70889d9e95c8e1e90c48fc50e72
- SHA1
  
  16df5352c014b6b9905b561511f86d4b4db3ed1e
- SHA256
  
  5e9999571194985f057ebece84566e6a6d734e300a7075916bee18bc9370f458
- SHA512
  
  e32a9f7eb4be00a6f3aeb96d7d478182257d0d83cdfbd79c3612de50c564262b159ac2dc2d020812f9da5e1e1cf23e051ed1c51082c482dc8b38f25ab25b88e8
- SSDEEP
  
  768:+4pCHse7ARlbQ8CDdJCiWcDpngIEc9KvK9q:TMMekR5Q8CDd6cZDl9
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion