5b2132e24410265d6348e8730365408d120621d177c3d13ec9c91d8a8e82cd9b | Triage

Sharing

General

Target

da7f17e58fe5b689de771b750d3ce2c7_JaffaCakes118
Size

196KB
Sample

240911-q8xfgavanb
MD5

da7f17e58fe5b689de771b750d3ce2c7
SHA1

843303e642304daf3d5617c5d6174e14c5c8fbd0
SHA256

5b2132e24410265d6348e8730365408d120621d177c3d13ec9c91d8a8e82cd9b
SHA512

e4273844d168f2872d593c36ce1f4e49900f35a23f0e21b0729761e15cc4aa4be937cb8275815fd84bee541e3658c7052925721e556157c22b64cae112140b5b
SSDEEP

3072:LcUcm0X3qDOUwUNvo8Hj/64qDuibRF+phTjJfscfyfaIn22:LcUK3qDpvTT6LDuibf+phTjJE7Pn22

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  da7f17e58fe5b689de771b750d3ce2c7_JaffaCakes118
- Size
  
  196KB
- MD5
  
  da7f17e58fe5b689de771b750d3ce2c7
- SHA1
  
  843303e642304daf3d5617c5d6174e14c5c8fbd0
- SHA256
  
  5b2132e24410265d6348e8730365408d120621d177c3d13ec9c91d8a8e82cd9b
- SHA512
  
  e4273844d168f2872d593c36ce1f4e49900f35a23f0e21b0729761e15cc4aa4be937cb8275815fd84bee541e3658c7052925721e556157c22b64cae112140b5b
- SSDEEP
  
  3072:LcUcm0X3qDOUwUNvo8Hj/64qDuibRF+phTjJfscfyfaIn22:LcUK3qDpvTT6LDuibf+phTjJE7Pn22
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion