General
-
Target
000f44aeb9b8938235d821d62f6b7bf7_JaffaCakes118
-
Size
23KB
-
Sample
240619-xl9kva1gpn
-
MD5
000f44aeb9b8938235d821d62f6b7bf7
-
SHA1
b0a4449af048801157a42d61bdba2bc4061372c7
-
SHA256
6e2250ab10d5754e5e0d47908034a0e7d4389521ee1d2d27a077cbd61712b983
-
SHA512
52babbd798574ee74405220339bd14a36d37e001b150df1c3670397dd83b378d71cccd604bcca8f791061dd82d695711858d40bbf2ed84922938d60532a40385
-
SSDEEP
384:KidD9d6GAH64+vC8hBL3qQ9yL36QA9Z1XaMN6nAjHAfa5jEqQ5zvtN4hI:Lr6WdqdLKQ+Pgfa8dvtN4K
Static task
static1
Behavioral task
behavioral1
Sample
000f44aeb9b8938235d821d62f6b7bf7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
000f44aeb9b8938235d821d62f6b7bf7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
000f44aeb9b8938235d821d62f6b7bf7_JaffaCakes118
-
Size
23KB
-
MD5
000f44aeb9b8938235d821d62f6b7bf7
-
SHA1
b0a4449af048801157a42d61bdba2bc4061372c7
-
SHA256
6e2250ab10d5754e5e0d47908034a0e7d4389521ee1d2d27a077cbd61712b983
-
SHA512
52babbd798574ee74405220339bd14a36d37e001b150df1c3670397dd83b378d71cccd604bcca8f791061dd82d695711858d40bbf2ed84922938d60532a40385
-
SSDEEP
384:KidD9d6GAH64+vC8hBL3qQ9yL36QA9Z1XaMN6nAjHAfa5jEqQ5zvtN4hI:Lr6WdqdLKQ+Pgfa8dvtN4K
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1