792e77ec6e99355977d2cfc84758c85aa9adc7291229278635d10013ee9edf28 | Triage

Sharing

General

Target

b4eb5af10cfdd4a1e9c072e45686c6b7_JaffaCakes118
Size

1.1MB
Sample

240821-y8ejnaserk
MD5

b4eb5af10cfdd4a1e9c072e45686c6b7
SHA1

f5d643c64479b9deacc350d7ae6bf35a3ed60545
SHA256

792e77ec6e99355977d2cfc84758c85aa9adc7291229278635d10013ee9edf28
SHA512

971035d30918a89d2b597b7ccc11657bbede1a78d426ed8d11846ca6873a3f0801088fd22f70a6a5b055cf0e0e567754fe90565645aa1b98eddf17d63b4588c0
SSDEEP

24576:Q6/giPpH6MgZUrXYZ92ua0nThAdV7/FauyqDMbCRYGYfo9zBu3hJ/lPv0x8:9/giPkMwULYaua4WJmqobCROgzBuxJtz

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  setup.exe
- Size
  
  1.4MB
- MD5
  
  706c6bfc8bfc84cff339ad4f1383b5f6
- SHA1
  
  2bee5db2fc7f4c0cb9657b3c56381edf55f20b9e
- SHA256
  
  a24bca9187ab78b0e924a7c34e897fbe6410dac464ad5df0f9652339e99328be
- SHA512
  
  40fde805e9c2f8b4803924cdedf87bbb3deb80143110ca1cbad98648ea511d4e99ac82444ae13a275fe8c36bbfdaef81b2a5e9f55fddb5cecbd66dcfce6a8b90
- SSDEEP
  
  24576:mbn04bdgOwOvZc+y8UZ3BQ9KtFkva8DgY4bQzy5kafTQUIz:m5ggc+GZ0KsTkxbEy2wTgz
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion