595a57e5444395da080d4eba13099e471bad7a1eaba0d2506b581353402b90ba | Triage

Sharing

General

Target

ea7b9649882cc177e14b7dd0d368a7bb_JaffaCakes118
Size

232KB
Sample

240919-dsgc4ayclk
MD5

ea7b9649882cc177e14b7dd0d368a7bb
SHA1

e718416e6402e9a997828166fb2b4415b2c32bbc
SHA256

595a57e5444395da080d4eba13099e471bad7a1eaba0d2506b581353402b90ba
SHA512

473222086cb96d64a402127feb280dc9edaf0d926c08dc87b7c97da3a6dea1568275dc56b1d06cc9a95a81f5a8ff5e53d038c153c8d171b8c8c6c908609aa6e5
SSDEEP

6144:0eux6nSU/j4B/dspchSnW8NVOo1qu/3PxhKNEjN:luxclK4nWyZ//xQNEjN

Score

8^/10

discovery evasion execution persistence

Malware Config

Targets

- Target
  
  ea7b9649882cc177e14b7dd0d368a7bb_JaffaCakes118
- Size
  
  232KB
- MD5
  
  ea7b9649882cc177e14b7dd0d368a7bb
- SHA1
  
  e718416e6402e9a997828166fb2b4415b2c32bbc
- SHA256
  
  595a57e5444395da080d4eba13099e471bad7a1eaba0d2506b581353402b90ba
- SHA512
  
  473222086cb96d64a402127feb280dc9edaf0d926c08dc87b7c97da3a6dea1568275dc56b1d06cc9a95a81f5a8ff5e53d038c153c8d171b8c8c6c908609aa6e5
- SSDEEP
  
  6144:0eux6nSU/j4B/dspchSnW8NVOo1qu/3PxhKNEjN:luxclK4nWyZ//xQNEjN
Score

8^/10

discovery evasion execution persistence
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Time Providers

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Time Providers

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistence

behavioral2