d7628c701beed542482944b7068653854a866bb0732aa6d3fe59e0e1831db69c | Triage

Sharing

General

Target

ee28d380d4df330120b513c2421bb599_JaffaCakes118
Size

10KB
Sample

240920-wtxqkszemb
MD5

ee28d380d4df330120b513c2421bb599
SHA1

ba7985f274171368994fd61d70238d27bcfe319b
SHA256

d7628c701beed542482944b7068653854a866bb0732aa6d3fe59e0e1831db69c
SHA512

81de4306c7f7cb2ca7fa25d6a0c2459f1c8afbf9ca1f58665783470be91de7481529a90ba657d987e110ea026847a413ddb518dbc8e0b80219eb54efa0b4879a
SSDEEP

192:knzJsINorN/ATwN8QF6Hu2SZU3tJDM2alRzZ9u79H48GVZsc:knNsWor+02HUkrI2alRd9xFv

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ee28d380d4df330120b513c2421bb599_JaffaCakes118
- Size
  
  10KB
- MD5
  
  ee28d380d4df330120b513c2421bb599
- SHA1
  
  ba7985f274171368994fd61d70238d27bcfe319b
- SHA256
  
  d7628c701beed542482944b7068653854a866bb0732aa6d3fe59e0e1831db69c
- SHA512
  
  81de4306c7f7cb2ca7fa25d6a0c2459f1c8afbf9ca1f58665783470be91de7481529a90ba657d987e110ea026847a413ddb518dbc8e0b80219eb54efa0b4879a
- SSDEEP
  
  192:knzJsINorN/ATwN8QF6Hu2SZU3tJDM2alRzZ9u79H48GVZsc:knNsWor+02HUkrI2alRd9xFv
Score

10^/10

evasion trojan discovery
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasiontrojan