e4043862f87d78f93f5ad82149e05f04257b840f8510bece91a22aff6c9e6e3b | Triage

Sharing

General

Target

de5b3ddef1701887ab64adbd0e42255b_JaffaCakes118
Size

92KB
Sample

240913-q3w8hssgmm
MD5

de5b3ddef1701887ab64adbd0e42255b
SHA1

0de03a67a1299fb80c844a048104e1693645c02d
SHA256

e4043862f87d78f93f5ad82149e05f04257b840f8510bece91a22aff6c9e6e3b
SHA512

130a30081196eb02f620aa7e0fc024ba81b6c13d964a0fdd95fc73602006df2016b3a38c6f6f8d94b506f5e28d720271db8aff595036b0b533b0339204537a0e
SSDEEP

1536:XhLYTj7wLK9tKNjfG9OUwzqNKkJyyc+WBSaoYAHdRpMfX2Ru0IgaNMYvQ0Dy:XhLYTYLK9tEbHUnsY5WQ2ATK0IvZY

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  de5b3ddef1701887ab64adbd0e42255b_JaffaCakes118
- Size
  
  92KB
- MD5
  
  de5b3ddef1701887ab64adbd0e42255b
- SHA1
  
  0de03a67a1299fb80c844a048104e1693645c02d
- SHA256
  
  e4043862f87d78f93f5ad82149e05f04257b840f8510bece91a22aff6c9e6e3b
- SHA512
  
  130a30081196eb02f620aa7e0fc024ba81b6c13d964a0fdd95fc73602006df2016b3a38c6f6f8d94b506f5e28d720271db8aff595036b0b533b0339204537a0e
- SSDEEP
  
  1536:XhLYTj7wLK9tKNjfG9OUwzqNKkJyyc+WBSaoYAHdRpMfX2Ru0IgaNMYvQ0Dy:XhLYTYLK9tEbHUnsY5WQ2ATK0IvZY
Score

10^/10

persistence discovery evasion
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistence