xtremerat | c7f5350cc54845867a16ca27a5c9960b2533a4c01d2e9aa151773c047d24cfce | Triage

Sharing

General

Target

JaffaCakes118_19f36a60351053532b8c283e830dfc4d
Size

92KB
Sample

250222-qp3hdawrft
MD5

19f36a60351053532b8c283e830dfc4d
SHA1

87347ffa12f7d198a169e131163e4117ac50f48d
SHA256

c7f5350cc54845867a16ca27a5c9960b2533a4c01d2e9aa151773c047d24cfce
SHA512

a594bbd1809e32505026d7eaf1727675d6744bb2fca2448dc93b771b3f07804a5db11c2ec24176268dd96bc6b311bd752d01b9f7063a27ec0c601fc466da37b4
SSDEEP

1536:ysq+QV4rObAdXWpfkyu7ozNwifowR9OkWh4d6mV2:b44rjKmodfowSzhw6m

Score

10^/10

xtremerat defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_19f36a60351053532b8c283e830dfc4d
- Size
  
  92KB
- MD5
  
  19f36a60351053532b8c283e830dfc4d
- SHA1
  
  87347ffa12f7d198a169e131163e4117ac50f48d
- SHA256
  
  c7f5350cc54845867a16ca27a5c9960b2533a4c01d2e9aa151773c047d24cfce
- SHA512
  
  a594bbd1809e32505026d7eaf1727675d6744bb2fca2448dc93b771b3f07804a5db11c2ec24176268dd96bc6b311bd752d01b9f7063a27ec0c601fc466da37b4
- SSDEEP
  
  1536:ysq+QV4rObAdXWpfkyu7ozNwifowR9OkWh4d6mV2:b44rjKmodfowSzhw6m
Score

10^/10

discovery defense_evasion
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscovery