b97dfc5e9713b05f1ce85dc7dd9a982af513b271eb06e0dd65f241e6bf75cf50 | Triage

Sharing

General

Target

0578321729b1d442e350458365792b58_JaffaCakes118
Size

42KB
Sample

241001-mhyn3ayema
MD5

0578321729b1d442e350458365792b58
SHA1

1642eccc79d49086e24781957ad61bc1617ce3eb
SHA256

b97dfc5e9713b05f1ce85dc7dd9a982af513b271eb06e0dd65f241e6bf75cf50
SHA512

d9d79206c579a6ef1c21c6ae077b20124e86e2ef18be595dcf099b8db3fb504b16f3623f718535bfcf0cf14ac84b4ed33f91e59bc5f4723b285786d084b72059
SSDEEP

768:dFDZ297K733ZL4OsPDsJOQICmcS7miUCbCB0ZOYirm3V1yoaChDl1F/oKaW7WXJo:oe18OyszIz7miUCbcYomLaoDHRJaW7

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  0578321729b1d442e350458365792b58_JaffaCakes118
- Size
  
  42KB
- MD5
  
  0578321729b1d442e350458365792b58
- SHA1
  
  1642eccc79d49086e24781957ad61bc1617ce3eb
- SHA256
  
  b97dfc5e9713b05f1ce85dc7dd9a982af513b271eb06e0dd65f241e6bf75cf50
- SHA512
  
  d9d79206c579a6ef1c21c6ae077b20124e86e2ef18be595dcf099b8db3fb504b16f3623f718535bfcf0cf14ac84b4ed33f91e59bc5f4723b285786d084b72059
- SSDEEP
  
  768:dFDZ297K733ZL4OsPDsJOQICmcS7miUCbCB0ZOYirm3V1yoaChDl1F/oKaW7WXJo:oe18OyszIz7miUCbcYomLaoDHRJaW7
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence