b565e922154ce9db7cf05b776ed6e13481e4ee4e43d3a494f103902338798adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f55f1e1123d27c9d0e066bd4f7f7b9_JaffaCakes118
Size

24KB
Sample

240619-2pnj1azckl
MD5

00f55f1e1123d27c9d0e066bd4f7f7b9
SHA1

7c3cdb569b1c0304b6b75eb93b8f2fed476f1917
SHA256

b565e922154ce9db7cf05b776ed6e13481e4ee4e43d3a494f103902338798adf
SHA512

684156f31f1988e6c5e8a190f9d7cdc0da6382237f0d2d41d3b710f0cd748f1d577bfedbae6758f8fc4a66215585a9a30aa4dc2347d1b069c142c369d741ef74
SSDEEP

384:vidD9d6GAuaQBrYh2zlPq+SRCR1iMNdjF5W5E2A6z4Zj2d0:qGyhxPoRswMbfWT74ZjP

Score

10^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  00f55f1e1123d27c9d0e066bd4f7f7b9_JaffaCakes118
- Size
  
  24KB
- MD5
  
  00f55f1e1123d27c9d0e066bd4f7f7b9
- SHA1
  
  7c3cdb569b1c0304b6b75eb93b8f2fed476f1917
- SHA256
  
  b565e922154ce9db7cf05b776ed6e13481e4ee4e43d3a494f103902338798adf
- SHA512
  
  684156f31f1988e6c5e8a190f9d7cdc0da6382237f0d2d41d3b710f0cd748f1d577bfedbae6758f8fc4a66215585a9a30aa4dc2347d1b069c142c369d741ef74
- SSDEEP
  
  384:vidD9d6GAuaQBrYh2zlPq+SRCR1iMNdjF5W5E2A6z4Zj2d0:qGyhxPoRswMbfWT74ZjP
Score

10^/10

evasion persistence privilege_escalation
- Modifies firewall policy service
  evasion
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation