feba86d3cb66ce364bdd61b4e35219412d2526567b182ecd1da0398dc2c8dca6 | Triage

Sharing

General

Target

ff3394b319a0491c805cfb2fc5e888f8_JaffaCakes118
Size

40KB
Sample

240929-xx52ssxajm
MD5

ff3394b319a0491c805cfb2fc5e888f8
SHA1

50bec9fbf22005fec8c841860c83c4dcb4913213
SHA256

feba86d3cb66ce364bdd61b4e35219412d2526567b182ecd1da0398dc2c8dca6
SHA512

103dc4ac305e11831255141cf2f89c38cbd0ccecb3cdfeff8e063fe2f08efecf6ad97cd8b4705cd5fda399eb4bc510171d494ae69a36b9a9c1ac98b4f93b7992
SSDEEP

768:7Yjblj4eNsnAwH0PibV/1k3DkSSIVLP9j/B72TiBp2K:7cJjLA0PibV/1SQSSIDp2

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  ff3394b319a0491c805cfb2fc5e888f8_JaffaCakes118
- Size
  
  40KB
- MD5
  
  ff3394b319a0491c805cfb2fc5e888f8
- SHA1
  
  50bec9fbf22005fec8c841860c83c4dcb4913213
- SHA256
  
  feba86d3cb66ce364bdd61b4e35219412d2526567b182ecd1da0398dc2c8dca6
- SHA512
  
  103dc4ac305e11831255141cf2f89c38cbd0ccecb3cdfeff8e063fe2f08efecf6ad97cd8b4705cd5fda399eb4bc510171d494ae69a36b9a9c1ac98b4f93b7992
- SSDEEP
  
  768:7Yjblj4eNsnAwH0PibV/1k3DkSSIVLP9j/B72TiBp2K:7cJjLA0PibV/1SQSSIDp2
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion