7394552b5f37bdd8390e1f7de5068fc84573fd8b85f81c6c6051fbd185565e71 | Triage

Sharing

General

Target

53ace17efb2fb073ec06e7bb22e29cd5_JaffaCakes118
Size

40KB
Sample

241017-znlmxayerp
MD5

53ace17efb2fb073ec06e7bb22e29cd5
SHA1

5e2bd024478694f199f40ef3daba5a3a75ebc959
SHA256

7394552b5f37bdd8390e1f7de5068fc84573fd8b85f81c6c6051fbd185565e71
SHA512

2159854fb76e74aa7a7ad0bbf8557de35c4be0567daa50406f0e4f047a244446d2d2742f9c6b09a3697f3a62bc37c6d312b88c4448c5240a715e74682c74e777
SSDEEP

768:08mfOM1hXL7EhnvAJhpemFJM8wJe7ih4eev57ykqfOM1:086OMP4hvoCmvM8Ye7Lv5ekmOM

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  53ace17efb2fb073ec06e7bb22e29cd5_JaffaCakes118
- Size
  
  40KB
- MD5
  
  53ace17efb2fb073ec06e7bb22e29cd5
- SHA1
  
  5e2bd024478694f199f40ef3daba5a3a75ebc959
- SHA256
  
  7394552b5f37bdd8390e1f7de5068fc84573fd8b85f81c6c6051fbd185565e71
- SHA512
  
  2159854fb76e74aa7a7ad0bbf8557de35c4be0567daa50406f0e4f047a244446d2d2742f9c6b09a3697f3a62bc37c6d312b88c4448c5240a715e74682c74e777
- SSDEEP
  
  768:08mfOM1hXL7EhnvAJhpemFJM8wJe7ih4eev57ykqfOM1:086OMP4hvoCmvM8Ye7Lv5ekmOM
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Drops file in Drivers directory
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion