General
-
Target
00136cbe77db60c35561c6aac412d319_JaffaCakes118
-
Size
514KB
-
Sample
240619-xp1r4sxdje
-
MD5
00136cbe77db60c35561c6aac412d319
-
SHA1
d3ac8f21fe283d7b971885f357f555d912b96578
-
SHA256
c258cac439aa30c267af59e2801764d7cb38b779e0393a8fc3c43f999bfb0392
-
SHA512
e24856365c52de02317c0d76aef37cbaca967e069d644cb7c2ed8d01321425f0b0a20ec38feb9246666e61d75b8498fb7b34c6ff2581f2c9beeab06bfb18dc48
-
SSDEEP
768:MujXFkomm9i6hzh5WU0hGERzeosrC4Iqre:xkomm9i6hrWUoBzKLre
Static task
static1
Behavioral task
behavioral1
Sample
00136cbe77db60c35561c6aac412d319_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00136cbe77db60c35561c6aac412d319_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
00136cbe77db60c35561c6aac412d319_JaffaCakes118
-
Size
514KB
-
MD5
00136cbe77db60c35561c6aac412d319
-
SHA1
d3ac8f21fe283d7b971885f357f555d912b96578
-
SHA256
c258cac439aa30c267af59e2801764d7cb38b779e0393a8fc3c43f999bfb0392
-
SHA512
e24856365c52de02317c0d76aef37cbaca967e069d644cb7c2ed8d01321425f0b0a20ec38feb9246666e61d75b8498fb7b34c6ff2581f2c9beeab06bfb18dc48
-
SSDEEP
768:MujXFkomm9i6hzh5WU0hGERzeosrC4Iqre:xkomm9i6hrWUoBzKLre
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1