General
-
Target
0012b800c4fe41d2a831fd7afbe0a405_JaffaCakes118
-
Size
21KB
-
Sample
240619-xpgz1a1hqn
-
MD5
0012b800c4fe41d2a831fd7afbe0a405
-
SHA1
fa805145b7be0261fe1ac5e749e4e5386e86e164
-
SHA256
4b894ac006747347a86f07b459deddc5ecbdf53faae4d557cda87cb55a93afe2
-
SHA512
0990dd6be17ec659800dd6c6a5a2f10d806d3cb5a28b5e7fac988b56b508600f89573d0a17fd6a4730a6f610efd46f23fd0046aa0dac49b5d8dae8837345e792
-
SSDEEP
384:JPyZNjtU2mqYJTotmspbE7iFB5LjcBfzxm8cFZBA:ByZbq5sh5Ff3Urxm8cF7A
Static task
static1
Behavioral task
behavioral1
Sample
0012b800c4fe41d2a831fd7afbe0a405_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0012b800c4fe41d2a831fd7afbe0a405_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0012b800c4fe41d2a831fd7afbe0a405_JaffaCakes118
-
Size
21KB
-
MD5
0012b800c4fe41d2a831fd7afbe0a405
-
SHA1
fa805145b7be0261fe1ac5e749e4e5386e86e164
-
SHA256
4b894ac006747347a86f07b459deddc5ecbdf53faae4d557cda87cb55a93afe2
-
SHA512
0990dd6be17ec659800dd6c6a5a2f10d806d3cb5a28b5e7fac988b56b508600f89573d0a17fd6a4730a6f610efd46f23fd0046aa0dac49b5d8dae8837345e792
-
SSDEEP
384:JPyZNjtU2mqYJTotmspbE7iFB5LjcBfzxm8cFZBA:ByZbq5sh5Ff3Urxm8cF7A
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1