fa7b9285252fa6eb2d426c5d26ec79993ba08f2aeb30b919c806d2a73251e3f1 | Triage

Sharing

General

Target

b596f3053aa0ee17ac014f793f986f76_JaffaCakes118
Size

364KB
Sample

240822-agw3maxhme
MD5

b596f3053aa0ee17ac014f793f986f76
SHA1

950c7f8f7b9c906d7e894243bce7973a1f26bbd4
SHA256

fa7b9285252fa6eb2d426c5d26ec79993ba08f2aeb30b919c806d2a73251e3f1
SHA512

610ebf5920c07d350b06cba4d348479ea34ad277864df03c8c0bb43d3a3af0394028eaa92ec0f3991511fc4140576f6ccf01b3200dd5a189e92edcb847476fb3
SSDEEP

6144:Kyxa+dYaWA5sjXjsXumqkzcwvgXbqzTtEk/reQpvsdf7Mzjtt6bq2EHkcwoVERU:TxzvG0Skz5vZfakLvsdf6zAxRU

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  b596f3053aa0ee17ac014f793f986f76_JaffaCakes118
- Size
  
  364KB
- MD5
  
  b596f3053aa0ee17ac014f793f986f76
- SHA1
  
  950c7f8f7b9c906d7e894243bce7973a1f26bbd4
- SHA256
  
  fa7b9285252fa6eb2d426c5d26ec79993ba08f2aeb30b919c806d2a73251e3f1
- SHA512
  
  610ebf5920c07d350b06cba4d348479ea34ad277864df03c8c0bb43d3a3af0394028eaa92ec0f3991511fc4140576f6ccf01b3200dd5a189e92edcb847476fb3
- SSDEEP
  
  6144:Kyxa+dYaWA5sjXjsXumqkzcwvgXbqzTtEk/reQpvsdf7Mzjtt6bq2EHkcwoVERU:TxzvG0Skz5vZfakLvsdf6zAxRU
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoverypersistence