General
-
Target
0e14483e34d2afc48dd917d01e03b810_JaffaCakes118
-
Size
141KB
-
Sample
240625-ppkrwssgpk
-
MD5
0e14483e34d2afc48dd917d01e03b810
-
SHA1
fc5b419ebe884d4313e5fccb6117c55b1f4d4c0e
-
SHA256
d6ea906ce6eaa974c11dbad9b237f69772ad8bf992ed5ac33b54f0e40f0ebee2
-
SHA512
47be83493b54dae8ff5f137a50c53530b8ec744cf86e3daa07c11a88ccdc36a734891293796ed137f73ba897ef783189d859b751fbdb747b065a12a543090863
-
SSDEEP
3072:FkVD1BSqao9c3HwsanTdgyOxsP+f+JA19TnMGz3b70aFmG04u7HPkYY6htWmzk6:6Sqjc3HsTaxoqPP35oG0dkHYts6
Static task
static1
Behavioral task
behavioral1
Sample
0e14483e34d2afc48dd917d01e03b810_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
0e14483e34d2afc48dd917d01e03b810_JaffaCakes118
-
Size
141KB
-
MD5
0e14483e34d2afc48dd917d01e03b810
-
SHA1
fc5b419ebe884d4313e5fccb6117c55b1f4d4c0e
-
SHA256
d6ea906ce6eaa974c11dbad9b237f69772ad8bf992ed5ac33b54f0e40f0ebee2
-
SHA512
47be83493b54dae8ff5f137a50c53530b8ec744cf86e3daa07c11a88ccdc36a734891293796ed137f73ba897ef783189d859b751fbdb747b065a12a543090863
-
SSDEEP
3072:FkVD1BSqao9c3HwsanTdgyOxsP+f+JA19TnMGz3b70aFmG04u7HPkYY6htWmzk6:6Sqjc3HsTaxoqPP35oG0dkHYts6
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1