General

  • Target

    00118c2db5d1cebd11f57dfd3cfcfcd7_JaffaCakes118

  • Size

    23KB

  • Sample

    240619-xnn2xs1hmk

  • MD5

    00118c2db5d1cebd11f57dfd3cfcfcd7

  • SHA1

    f6a7afa7ed283c10236d532e199cc0de325c34c1

  • SHA256

    2769d903de964e41c2e7fd4284aee905b2c02b46d48a9416522770c63700feda

  • SHA512

    daeeb6c0acfb5a52b4c55f4aaa7440565f70f7edf8df949f16bf269a52a148bc772f433eb3d312a0559fb042d982ec242517b9740df4f06b277bd159abd08766

  • SSDEEP

    384:DPyZNjtU2mXAxbKcB3sv+Sp8XHTfHZ+tg7twZ3hHjxGzxI/vvpn:ryZuiJAyjfHgtghCDx2xI/vRn

Malware Config

Targets

    • Target

      00118c2db5d1cebd11f57dfd3cfcfcd7_JaffaCakes118

    • Size

      23KB

    • MD5

      00118c2db5d1cebd11f57dfd3cfcfcd7

    • SHA1

      f6a7afa7ed283c10236d532e199cc0de325c34c1

    • SHA256

      2769d903de964e41c2e7fd4284aee905b2c02b46d48a9416522770c63700feda

    • SHA512

      daeeb6c0acfb5a52b4c55f4aaa7440565f70f7edf8df949f16bf269a52a148bc772f433eb3d312a0559fb042d982ec242517b9740df4f06b277bd159abd08766

    • SSDEEP

      384:DPyZNjtU2mXAxbKcB3sv+Sp8XHTfHZ+tg7twZ3hHjxGzxI/vvpn:ryZuiJAyjfHgtghCDx2xI/vRn

    • Modifies firewall policy service

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks