General

  • Target

    000f44aeb9b8938235d821d62f6b7bf7_JaffaCakes118

  • Size

    23KB

  • Sample

    240619-xl9kva1gpn

  • MD5

    000f44aeb9b8938235d821d62f6b7bf7

  • SHA1

    b0a4449af048801157a42d61bdba2bc4061372c7

  • SHA256

    6e2250ab10d5754e5e0d47908034a0e7d4389521ee1d2d27a077cbd61712b983

  • SHA512

    52babbd798574ee74405220339bd14a36d37e001b150df1c3670397dd83b378d71cccd604bcca8f791061dd82d695711858d40bbf2ed84922938d60532a40385

  • SSDEEP

    384:KidD9d6GAH64+vC8hBL3qQ9yL36QA9Z1XaMN6nAjHAfa5jEqQ5zvtN4hI:Lr6WdqdLKQ+Pgfa8dvtN4K

Malware Config

Targets

    • Target

      000f44aeb9b8938235d821d62f6b7bf7_JaffaCakes118

    • Size

      23KB

    • MD5

      000f44aeb9b8938235d821d62f6b7bf7

    • SHA1

      b0a4449af048801157a42d61bdba2bc4061372c7

    • SHA256

      6e2250ab10d5754e5e0d47908034a0e7d4389521ee1d2d27a077cbd61712b983

    • SHA512

      52babbd798574ee74405220339bd14a36d37e001b150df1c3670397dd83b378d71cccd604bcca8f791061dd82d695711858d40bbf2ed84922938d60532a40385

    • SSDEEP

      384:KidD9d6GAH64+vC8hBL3qQ9yL36QA9Z1XaMN6nAjHAfa5jEqQ5zvtN4hI:Lr6WdqdLKQ+Pgfa8dvtN4K

    • Modifies firewall policy service

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks