General
-
Target
00118c2db5d1cebd11f57dfd3cfcfcd7_JaffaCakes118
-
Size
23KB
-
Sample
240619-xnn2xs1hmk
-
MD5
00118c2db5d1cebd11f57dfd3cfcfcd7
-
SHA1
f6a7afa7ed283c10236d532e199cc0de325c34c1
-
SHA256
2769d903de964e41c2e7fd4284aee905b2c02b46d48a9416522770c63700feda
-
SHA512
daeeb6c0acfb5a52b4c55f4aaa7440565f70f7edf8df949f16bf269a52a148bc772f433eb3d312a0559fb042d982ec242517b9740df4f06b277bd159abd08766
-
SSDEEP
384:DPyZNjtU2mXAxbKcB3sv+Sp8XHTfHZ+tg7twZ3hHjxGzxI/vvpn:ryZuiJAyjfHgtghCDx2xI/vRn
Static task
static1
Behavioral task
behavioral1
Sample
00118c2db5d1cebd11f57dfd3cfcfcd7_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
00118c2db5d1cebd11f57dfd3cfcfcd7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
00118c2db5d1cebd11f57dfd3cfcfcd7_JaffaCakes118
-
Size
23KB
-
MD5
00118c2db5d1cebd11f57dfd3cfcfcd7
-
SHA1
f6a7afa7ed283c10236d532e199cc0de325c34c1
-
SHA256
2769d903de964e41c2e7fd4284aee905b2c02b46d48a9416522770c63700feda
-
SHA512
daeeb6c0acfb5a52b4c55f4aaa7440565f70f7edf8df949f16bf269a52a148bc772f433eb3d312a0559fb042d982ec242517b9740df4f06b277bd159abd08766
-
SSDEEP
384:DPyZNjtU2mXAxbKcB3sv+Sp8XHTfHZ+tg7twZ3hHjxGzxI/vvpn:ryZuiJAyjfHgtghCDx2xI/vRn
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1