7741ab7bd8f1c6d5dbcb75aba76fa3eb3a46829afdfee32e074df4ee6aee38e8 | Triage

Sharing

General

Target

f09342088ca05413f1ba7028d9b57e1e_JaffaCakes118
Size

56KB
Sample

240921-zg39dasglp
MD5

f09342088ca05413f1ba7028d9b57e1e
SHA1

fbf53f52d50f0a6840d26f85792a22093da43879
SHA256

7741ab7bd8f1c6d5dbcb75aba76fa3eb3a46829afdfee32e074df4ee6aee38e8
SHA512

5af517ad875b45f12e228d11a57ad4b29423f2660a1b34ee36b2b8f1277e088c15140ecaa65fb000941bd371a4e33ef37044faabde87225d5cdafdf7fc2e9d0f
SSDEEP

768:Bd1l6E8n34lzcKp8NRWr/xr4cJYjHdHAUKKwvvQhhr4lzc6E8n3:b144BcKr/xU/LdgU8vIhhr4Bc

Score

10^/10

discovery evasion execution trojan

Malware Config

Targets

- Target
  
  f09342088ca05413f1ba7028d9b57e1e_JaffaCakes118
- Size
  
  56KB
- MD5
  
  f09342088ca05413f1ba7028d9b57e1e
- SHA1
  
  fbf53f52d50f0a6840d26f85792a22093da43879
- SHA256
  
  7741ab7bd8f1c6d5dbcb75aba76fa3eb3a46829afdfee32e074df4ee6aee38e8
- SHA512
  
  5af517ad875b45f12e228d11a57ad4b29423f2660a1b34ee36b2b8f1277e088c15140ecaa65fb000941bd371a4e33ef37044faabde87225d5cdafdf7fc2e9d0f
- SSDEEP
  
  768:Bd1l6E8n34lzcKp8NRWr/xr4cJYjHdHAUKKwvvQhhr4lzc6E8n3:b144BcKr/xU/LdgU8vIhhr4Bc
Score

10^/10

discovery evasion execution trojan
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Stops running service(s)
  evasion execution
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutiontrojan

behavioral2

discoveryevasionexecutiontrojan