284ecca23662cf028b3ba12c362d2b8b0e701a80d854b0c7b4b5fbce6630f79b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

553e9de4a938ab1c474dfda95c5bccdd_JaffaCakes118
Size

344KB
Sample

241018-d2z7kaxepn
MD5

553e9de4a938ab1c474dfda95c5bccdd
SHA1

fee0b340f02142c2a210da74d2d965d025f16e67
SHA256

284ecca23662cf028b3ba12c362d2b8b0e701a80d854b0c7b4b5fbce6630f79b
SHA512

c15ccc66878a429461e555d64ef8e028d70ebcf3e38d8f9d507b9d234425844d1f5748d9628116c5bc137614b6c97eba7f29d76a383f19f04cfe4db630bccc35
SSDEEP

6144:1G78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcx:k7kmAN6omFMb3sGB6UduRfLax

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  553e9de4a938ab1c474dfda95c5bccdd_JaffaCakes118
- Size
  
  344KB
- MD5
  
  553e9de4a938ab1c474dfda95c5bccdd
- SHA1
  
  fee0b340f02142c2a210da74d2d965d025f16e67
- SHA256
  
  284ecca23662cf028b3ba12c362d2b8b0e701a80d854b0c7b4b5fbce6630f79b
- SHA512
  
  c15ccc66878a429461e555d64ef8e028d70ebcf3e38d8f9d507b9d234425844d1f5748d9628116c5bc137614b6c97eba7f29d76a383f19f04cfe4db630bccc35
- SSDEEP
  
  6144:1G78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcx:k7kmAN6omFMb3sGB6UduRfLax
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence