d6af2e7fa04b93e3503383c0dc5ea6ff26246f7238185f41d332d048a0b303d7 | Triage

Sharing

General

Target

addf358e8e7341e57535b7d8bbe91cad_JaffaCakes118
Size

137KB
Sample

240820-e7g4lstdpd
MD5

addf358e8e7341e57535b7d8bbe91cad
SHA1

be3f545251b5c591e702339946fcbb18c39a0d09
SHA256

d6af2e7fa04b93e3503383c0dc5ea6ff26246f7238185f41d332d048a0b303d7
SHA512

bbf9d33e1c75bd0ee756924373836de94eba30efb003d1a12413f72c8b257f2da7f7c03129fa9cf87c1819322cee8820b98d8ad87e02ae5bdc9315584f157715
SSDEEP

1536:gTUm+f6UhgDyBKy3XKjiPX/zcaIDDsCrNfrC9+lmk:gomyNhgWgy3am7caIU6NTNlt

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  addf358e8e7341e57535b7d8bbe91cad_JaffaCakes118
- Size
  
  137KB
- MD5
  
  addf358e8e7341e57535b7d8bbe91cad
- SHA1
  
  be3f545251b5c591e702339946fcbb18c39a0d09
- SHA256
  
  d6af2e7fa04b93e3503383c0dc5ea6ff26246f7238185f41d332d048a0b303d7
- SHA512
  
  bbf9d33e1c75bd0ee756924373836de94eba30efb003d1a12413f72c8b257f2da7f7c03129fa9cf87c1819322cee8820b98d8ad87e02ae5bdc9315584f157715
- SSDEEP
  
  1536:gTUm+f6UhgDyBKy3XKjiPX/zcaIDDsCrNfrC9+lmk:gomyNhgWgy3am7caIU6NTNlt
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion