9aef208d1c1ec84cfc4819c3d1a6ba9361c9643d39bc56c5850c8ec822e71395 | Triage

Sharing

General

Target

0007df2551792f4e2cf7fecac141a858_JaffaCakes118
Size

23KB
Sample

240619-xfwf2awhjh
MD5

0007df2551792f4e2cf7fecac141a858
SHA1

1002baabba2508cf48df3f16acdc461deb7f3c5b
SHA256

9aef208d1c1ec84cfc4819c3d1a6ba9361c9643d39bc56c5850c8ec822e71395
SHA512

0c7229ccf237240d79c90d57b589ecb7e40cf0778c953173f77a17fcfff91c00891eea0ed34c8518b7dab42dd8c98982dadc8c5eea9ebc3073ceb13e4b1bf81d
SSDEEP

384:VidD9d6GArG45TH/t52oTtZaeFMMjMfOlEZx1zEFpYHmSX:UDKaoZdFVM2o3EFpYHmK

Score

10^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  0007df2551792f4e2cf7fecac141a858_JaffaCakes118
- Size
  
  23KB
- MD5
  
  0007df2551792f4e2cf7fecac141a858
- SHA1
  
  1002baabba2508cf48df3f16acdc461deb7f3c5b
- SHA256
  
  9aef208d1c1ec84cfc4819c3d1a6ba9361c9643d39bc56c5850c8ec822e71395
- SHA512
  
  0c7229ccf237240d79c90d57b589ecb7e40cf0778c953173f77a17fcfff91c00891eea0ed34c8518b7dab42dd8c98982dadc8c5eea9ebc3073ceb13e4b1bf81d
- SSDEEP
  
  384:VidD9d6GArG45TH/t52oTtZaeFMMjMfOlEZx1zEFpYHmSX:UDKaoZdFVM2o3EFpYHmK
Score

10^/10

evasion persistence privilege_escalation
- Modifies firewall policy service
  evasion
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation