22c06d4c0d6b544663b5031eb07907e60b8f60ad65d5102f8ff2b7decaf1c607 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6e98602f3c9101c8a318969ee1960b4_JaffaCakes118
Size

441KB
Sample

240909-xmb1zawenh
MD5

d6e98602f3c9101c8a318969ee1960b4
SHA1

6f3101df35d7e36020a7e84c61a161c6bb9f5079
SHA256

22c06d4c0d6b544663b5031eb07907e60b8f60ad65d5102f8ff2b7decaf1c607
SHA512

6830c8e45ebaea3740bf11b766006bff343b53e436cae7d616fc33518b50861e5ce04cab6f363051a9fbb83ca83e89a0ce1b2c437da1adb4dff66b2ec13e3acf
SSDEEP

6144:xBmCr/JPiSFvbfCw5tg8b+IpxpLW/VpCuLkkri6+hZIuJIpJ9HDsI4esxJK:3rRPiSpCSBb+M9cpRLkHhZJgJ9HDKei

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d6e98602f3c9101c8a318969ee1960b4_JaffaCakes118
- Size
  
  441KB
- MD5
  
  d6e98602f3c9101c8a318969ee1960b4
- SHA1
  
  6f3101df35d7e36020a7e84c61a161c6bb9f5079
- SHA256
  
  22c06d4c0d6b544663b5031eb07907e60b8f60ad65d5102f8ff2b7decaf1c607
- SHA512
  
  6830c8e45ebaea3740bf11b766006bff343b53e436cae7d616fc33518b50861e5ce04cab6f363051a9fbb83ca83e89a0ce1b2c437da1adb4dff66b2ec13e3acf
- SSDEEP
  
  6144:xBmCr/JPiSFvbfCw5tg8b+IpxpLW/VpCuLkkri6+hZIuJIpJ9HDsI4esxJK:3rRPiSpCSBb+M9cpRLkHhZJgJ9HDKei
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoverypersistence