39718fd56e6fa0228f46b1eef8d6a445bbbd36a2679c97d52aad7a8f481a300b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

068dbb8a98c1f67c17a4d6f965d6c4e7_JaffaCakes118
Size

10KB
Sample

240620-q3xjaavelm
MD5

068dbb8a98c1f67c17a4d6f965d6c4e7
SHA1

296a62f581a0ab71ca58d4441dc320e41dd166a6
SHA256

39718fd56e6fa0228f46b1eef8d6a445bbbd36a2679c97d52aad7a8f481a300b
SHA512

f51647330f9d1c20fd6ce899eef7d02da16be500b3950aee79e25230bbbb8897f5dfd8ad86c503086e8f0d955de02e43a39396b50c6ee51e513d1c9254577170
SSDEEP

192:eN+fAT7fzJpnkwPFPnnZag7DJJtOs/LFpZMHE9LTQu33ClnmdvyCGN5u5Ve2p:OsAT7fdpkQFPnZdD3tTLFPMHyMxUdvyI

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  068dbb8a98c1f67c17a4d6f965d6c4e7_JaffaCakes118
- Size
  
  10KB
- MD5
  
  068dbb8a98c1f67c17a4d6f965d6c4e7
- SHA1
  
  296a62f581a0ab71ca58d4441dc320e41dd166a6
- SHA256
  
  39718fd56e6fa0228f46b1eef8d6a445bbbd36a2679c97d52aad7a8f481a300b
- SHA512
  
  f51647330f9d1c20fd6ce899eef7d02da16be500b3950aee79e25230bbbb8897f5dfd8ad86c503086e8f0d955de02e43a39396b50c6ee51e513d1c9254577170
- SSDEEP
  
  192:eN+fAT7fzJpnkwPFPnnZag7DJJtOs/LFpZMHE9LTQu33ClnmdvyCGN5u5Ve2p:OsAT7fdpkQFPnZdD3tTLFPMHyMxUdvyI
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistenceprivilege_escalation