cfd250c8ba9f1bd5578c79d8314d75be9c0e1413fed246458a2c15d77f19696f | Triage

Sharing

General

Target

01a02a53fbe9e7664604415bc7884f9b_JaffaCakes118
Size

23KB
Sample

240620-bh6twszgpa
MD5

01a02a53fbe9e7664604415bc7884f9b
SHA1

8eea2cbf56237f483d01e90a40b39439f7204fc9
SHA256

cfd250c8ba9f1bd5578c79d8314d75be9c0e1413fed246458a2c15d77f19696f
SHA512

e41871b8e40c028e5f927218ebc17ab8d8df1f870a2ff71ce04de15b221b7d15e05c45c43f06cdbd1fc4bc283a7249cb874e85d85a81bced52a25b3ed3e23bb4
SSDEEP

384:5PyZNjtU2mzQBz222KIWpHoqIjRfYPXE01fC4zEiwUiOtTOHDa:RyZ66Jd5oZxYP31fCYEiw41Om

Score

10^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  01a02a53fbe9e7664604415bc7884f9b_JaffaCakes118
- Size
  
  23KB
- MD5
  
  01a02a53fbe9e7664604415bc7884f9b
- SHA1
  
  8eea2cbf56237f483d01e90a40b39439f7204fc9
- SHA256
  
  cfd250c8ba9f1bd5578c79d8314d75be9c0e1413fed246458a2c15d77f19696f
- SHA512
  
  e41871b8e40c028e5f927218ebc17ab8d8df1f870a2ff71ce04de15b221b7d15e05c45c43f06cdbd1fc4bc283a7249cb874e85d85a81bced52a25b3ed3e23bb4
- SSDEEP
  
  384:5PyZNjtU2mzQBz222KIWpHoqIjRfYPXE01fC4zEiwUiOtTOHDa:RyZ66Jd5oZxYP31fCYEiw41Om
Score

10^/10

evasion persistence privilege_escalation
- Modifies firewall policy service
  evasion
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation