4c2aeff95b92fd749d71c2420fe428a2fea39b1f51db1ad6e120e3d126e575eb | Triage

Sharing

General

Target

eaaebfb1302b56bc77ba10bead1c1f1c_JaffaCakes118
Size

136KB
Sample

240919-gasvystdkk
MD5

eaaebfb1302b56bc77ba10bead1c1f1c
SHA1

28755462764576db23cabc3c8bdbb474614bcc55
SHA256

4c2aeff95b92fd749d71c2420fe428a2fea39b1f51db1ad6e120e3d126e575eb
SHA512

48260911756fbbae8b77e0b83db225b65d61d2e0492702aa1ce239776759744e1b59dc0b3054a02a4e3b5c4a773196c169d5c3dbc2fb1566be8809b25304423a
SSDEEP

3072:XOK317YNJN6L+RRWRtZhbNqVy+NTH5RGwBlas5rJIIEPN8UTZgujsxdH6Pr1fvIk:Xl7YNJN6L+RRWRtZhbNqVyIRGwBl9rJ0

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  eaaebfb1302b56bc77ba10bead1c1f1c_JaffaCakes118
- Size
  
  136KB
- MD5
  
  eaaebfb1302b56bc77ba10bead1c1f1c
- SHA1
  
  28755462764576db23cabc3c8bdbb474614bcc55
- SHA256
  
  4c2aeff95b92fd749d71c2420fe428a2fea39b1f51db1ad6e120e3d126e575eb
- SHA512
  
  48260911756fbbae8b77e0b83db225b65d61d2e0492702aa1ce239776759744e1b59dc0b3054a02a4e3b5c4a773196c169d5c3dbc2fb1566be8809b25304423a
- SSDEEP
  
  3072:XOK317YNJN6L+RRWRtZhbNqVy+NTH5RGwBlas5rJIIEPN8UTZgujsxdH6Pr1fvIk:Xl7YNJN6L+RRWRtZhbNqVyIRGwBl9rJ0
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence