a4470a3fc24703976217fd9aeb6758c8d09ead5ea8cdf114c287b559b63f0b7d | Triage

Sharing

General

Target

f4f7e6f813317dfdb521e9a4c8701cb9_JaffaCakes118
Size

32KB
Sample

240925-cwzheasera
MD5

f4f7e6f813317dfdb521e9a4c8701cb9
SHA1

5e135676cf3dff7920469379682c8d99c317c0f0
SHA256

a4470a3fc24703976217fd9aeb6758c8d09ead5ea8cdf114c287b559b63f0b7d
SHA512

535e57f7eef29823e643bd93ea170ee1eb3572a1f521e6be76ee3bbef91de3a727e6c73909901f97dca9f038f76d9548626de1479d5ebff4b6de802987067e17
SSDEEP

384:29oqDswpeD68I4c0hWQGyrEbwuA4d37SrFYg/9WLKSDZyn4f:2iaswMLI4cnLyrEbwuA4d37EYgsLvo4

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  f4f7e6f813317dfdb521e9a4c8701cb9_JaffaCakes118
- Size
  
  32KB
- MD5
  
  f4f7e6f813317dfdb521e9a4c8701cb9
- SHA1
  
  5e135676cf3dff7920469379682c8d99c317c0f0
- SHA256
  
  a4470a3fc24703976217fd9aeb6758c8d09ead5ea8cdf114c287b559b63f0b7d
- SHA512
  
  535e57f7eef29823e643bd93ea170ee1eb3572a1f521e6be76ee3bbef91de3a727e6c73909901f97dca9f038f76d9548626de1479d5ebff4b6de802987067e17
- SSDEEP
  
  384:29oqDswpeD68I4c0hWQGyrEbwuA4d37SrFYg/9WLKSDZyn4f:2iaswMLI4cnLyrEbwuA4d37EYgsLvo4
Score

10^/10

discovery evasion
- Modifies security service
  evasion
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion