72ba635926cc6fc3998d9318352d5611d42937b46b5e1af4758cda4a94498060 | Triage

Sharing

General

Target

fabf99a2cfac761249eedce378f05770_JaffaCakes118
Size

10KB
Sample

240927-tzbzys1enp
MD5

fabf99a2cfac761249eedce378f05770
SHA1

c64af7337680192d793ad25af0881c0bd9811d44
SHA256

72ba635926cc6fc3998d9318352d5611d42937b46b5e1af4758cda4a94498060
SHA512

dd6ae99b373c681efb2cccf47deb76f49b6c869be50507325827ea15004b3bf5ec2b4da633877fccf81eb23ab118f85372effab05b09e18b8bdbf4e8754d3a8e
SSDEEP

192:ba8WiGFw8lgm1L1uhgrq92UHHkZo5PiJwZIqdGTKZFwhxvzb:HWiG+8lZ1uCm2cH2o5PgwquAvzb

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  fabf99a2cfac761249eedce378f05770_JaffaCakes118
- Size
  
  10KB
- MD5
  
  fabf99a2cfac761249eedce378f05770
- SHA1
  
  c64af7337680192d793ad25af0881c0bd9811d44
- SHA256
  
  72ba635926cc6fc3998d9318352d5611d42937b46b5e1af4758cda4a94498060
- SHA512
  
  dd6ae99b373c681efb2cccf47deb76f49b6c869be50507325827ea15004b3bf5ec2b4da633877fccf81eb23ab118f85372effab05b09e18b8bdbf4e8754d3a8e
- SSDEEP
  
  192:ba8WiGFw8lgm1L1uhgrq92UHHkZo5PiJwZIqdGTKZFwhxvzb:HWiG+8lZ1uCm2cH2o5PgwquAvzb
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2