bec83c3e7d62b03c97a513743815fb8958fcbc9a95c707a87486732bb361f964 | Triage

Sharing

General

Target

fbecaa43ac450bf17b689d0707f341bf_JaffaCakes118
Size

78KB
Sample

240928-kpcztswhql
MD5

fbecaa43ac450bf17b689d0707f341bf
SHA1

c200ce005761304797a78e958c24180af6ad6a4b
SHA256

bec83c3e7d62b03c97a513743815fb8958fcbc9a95c707a87486732bb361f964
SHA512

8f7d1fc716c1d21b9238b7564acc5083ab6b768464d17f6aaaf0e996866d6571396a3b9bc77d922cf39711f3298f002d3d75d50daa356dcf90cfbdbce1bb3e96
SSDEEP

1536:dZ78xGwt6pv1aD0sTeVtYe1R3dDtqQm47I+8VSdh65CnlEet93ORqw:dZ7KGwt4dAXi3dBHm47IjtZAoRqw

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  fbecaa43ac450bf17b689d0707f341bf_JaffaCakes118
- Size
  
  78KB
- MD5
  
  fbecaa43ac450bf17b689d0707f341bf
- SHA1
  
  c200ce005761304797a78e958c24180af6ad6a4b
- SHA256
  
  bec83c3e7d62b03c97a513743815fb8958fcbc9a95c707a87486732bb361f964
- SHA512
  
  8f7d1fc716c1d21b9238b7564acc5083ab6b768464d17f6aaaf0e996866d6571396a3b9bc77d922cf39711f3298f002d3d75d50daa356dcf90cfbdbce1bb3e96
- SSDEEP
  
  1536:dZ78xGwt6pv1aD0sTeVtYe1R3dDtqQm47I+8VSdh65CnlEet93ORqw:dZ7KGwt4dAXi3dBHm47IjtZAoRqw
Score

10^/10

discovery evasion
- Modifies security service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion