b046f6abef832290eb66bc062d5bb3d9adc944872efb24cb85b1478018187e31 | Triage

Sharing

General

Target

001496969839138df499aa4fbbd1e98d_JaffaCakes118
Size

23KB
Sample

240619-xqm8easalm
MD5

001496969839138df499aa4fbbd1e98d
SHA1

cbb910b6e4b3b6f7d0692f67c7c3a8ab6d2362f5
SHA256

b046f6abef832290eb66bc062d5bb3d9adc944872efb24cb85b1478018187e31
SHA512

6f68d456a2c6057ef6d8c38bdaa794525e809270e13d3c367fe0f89b0cc1aa5eb04785e772f1656fc404e2507190720fd8b92c5ed1ce95e746312cc4cfce0ffa
SSDEEP

384:BpdNjtU2OB574yEESpTVmLm8eZLwiwasBRvKjmjSSjGB+e/OszXtUnkyW/0l:Bpd+14pcm8uEiwahjiGB+SXtUkyf

Score

10^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  001496969839138df499aa4fbbd1e98d_JaffaCakes118
- Size
  
  23KB
- MD5
  
  001496969839138df499aa4fbbd1e98d
- SHA1
  
  cbb910b6e4b3b6f7d0692f67c7c3a8ab6d2362f5
- SHA256
  
  b046f6abef832290eb66bc062d5bb3d9adc944872efb24cb85b1478018187e31
- SHA512
  
  6f68d456a2c6057ef6d8c38bdaa794525e809270e13d3c367fe0f89b0cc1aa5eb04785e772f1656fc404e2507190720fd8b92c5ed1ce95e746312cc4cfce0ffa
- SSDEEP
  
  384:BpdNjtU2OB574yEESpTVmLm8eZLwiwasBRvKjmjSSjGB+e/OszXtUnkyW/0l:Bpd+14pcm8uEiwahjiGB+SXtUkyf
Score

10^/10

evasion persistence privilege_escalation
- Modifies firewall policy service
  evasion
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation