aea16cc2741988429178149ffc8d391fface295e88278327f08b0392fb5b875c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbb1b67c2d79e70e08ccbaf667606077_JaffaCakes118
Size

104KB
Sample

240912-dhyjmaxhmn
MD5

dbb1b67c2d79e70e08ccbaf667606077
SHA1

888e014169489e8c013dd09df267ee68ec828960
SHA256

aea16cc2741988429178149ffc8d391fface295e88278327f08b0392fb5b875c
SHA512

be54e3a131c1bc32dd7a27c4de9ef44259291384946978525c8f29647d06141aa60d57e567bca54a2d54e7b4e2ee63acda4f9f4919f891cec428febd489e54ad
SSDEEP

1536:dit/UJNoLHLoOTcQpjTGZTg57qCe9oodOOHEr42aeEKIg4:IYC/oQp/GZ87GyodDHEr428Y

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  dbb1b67c2d79e70e08ccbaf667606077_JaffaCakes118
- Size
  
  104KB
- MD5
  
  dbb1b67c2d79e70e08ccbaf667606077
- SHA1
  
  888e014169489e8c013dd09df267ee68ec828960
- SHA256
  
  aea16cc2741988429178149ffc8d391fface295e88278327f08b0392fb5b875c
- SHA512
  
  be54e3a131c1bc32dd7a27c4de9ef44259291384946978525c8f29647d06141aa60d57e567bca54a2d54e7b4e2ee63acda4f9f4919f891cec428febd489e54ad
- SSDEEP
  
  1536:dit/UJNoLHLoOTcQpjTGZTg57qCe9oodOOHEr42aeEKIg4:IYC/oQp/GZ87GyodDHEr428Y
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2