86e9db9175ca670f6246207119d241048f0f4feff8dbe43c2953f3edf5a07022 | Triage

Sharing

General

Target

a3f754c05881d1f814cf4cf4c2bca77c_JaffaCakes118
Size

1.2MB
Sample

240817-yyd55svalb
MD5

a3f754c05881d1f814cf4cf4c2bca77c
SHA1

b4c03a1f63de2e9afae0dc71d508604dab2e3c13
SHA256

86e9db9175ca670f6246207119d241048f0f4feff8dbe43c2953f3edf5a07022
SHA512

0c08d922c717477a7f823f07938b52bee3decdec2b4cab44db3fc83b9c1c24ad344ff48df5d316a2ed20d757a506834e392d691857a9ebc72ed2cfe0a5fc235f
SSDEEP

12288:TquryeD3h/N1jpZNi9R+swevu2pG4FiMIYkk22kBkmMkkEkkCfs6k05kqiXQkkKX:TqueANtN8rFiMIYMg9TqfFiMIY9

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  a3f754c05881d1f814cf4cf4c2bca77c_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  a3f754c05881d1f814cf4cf4c2bca77c
- SHA1
  
  b4c03a1f63de2e9afae0dc71d508604dab2e3c13
- SHA256
  
  86e9db9175ca670f6246207119d241048f0f4feff8dbe43c2953f3edf5a07022
- SHA512
  
  0c08d922c717477a7f823f07938b52bee3decdec2b4cab44db3fc83b9c1c24ad344ff48df5d316a2ed20d757a506834e392d691857a9ebc72ed2cfe0a5fc235f
- SSDEEP
  
  12288:TquryeD3h/N1jpZNi9R+swevu2pG4FiMIYkk22kBkmMkkEkkCfs6k05kqiXQkkKX:TqueANtN8rFiMIYMg9TqfFiMIY9
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion