c9da228045437df62d30dea26215d24cf8ea5e2144b79ac007d9f8bcd7b9f938 | Triage

Sharing

General

Target

JaffaCakes118_32fafb8c00efb2174c9793f2f4888069
Size

19KB
Sample

250126-ghkjjsvnfj
MD5

32fafb8c00efb2174c9793f2f4888069
SHA1

96260ad6dffb34e9e1b414438d7b0f0c5074f1ea
SHA256

c9da228045437df62d30dea26215d24cf8ea5e2144b79ac007d9f8bcd7b9f938
SHA512

8193ff1820b78e7a57533c0749b3904038411a2317f0d27eef12a26362041b29e0c659ac9139b62a84329f8ffece58fdece9f55976e3ad14c72aecabd83becad
SSDEEP

384:st82GH25tkJUEE+3ihE2w31qExKh7q7iGJCdII6oqXU:A7nn+yhjw36qO03Iv

Score

10^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_32fafb8c00efb2174c9793f2f4888069
- Size
  
  19KB
- MD5
  
  32fafb8c00efb2174c9793f2f4888069
- SHA1
  
  96260ad6dffb34e9e1b414438d7b0f0c5074f1ea
- SHA256
  
  c9da228045437df62d30dea26215d24cf8ea5e2144b79ac007d9f8bcd7b9f938
- SHA512
  
  8193ff1820b78e7a57533c0749b3904038411a2317f0d27eef12a26362041b29e0c659ac9139b62a84329f8ffece58fdece9f55976e3ad14c72aecabd83becad
- SSDEEP
  
  384:st82GH25tkJUEE+3ihE2w31qExKh7q7iGJCdII6oqXU:A7nn+yhjw36qO03Iv
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery